I've used Bitwarden as my password manager and authenticator for a long time. I've been testing Pass and I really like it overall.

But the thing I realized is that in order to sign in to my Proton account, I need to provide an OTA code. No problem when I'm using a separate password manager/authenticator. But when Pass is my authenticator I don't have access to the OTA code (if I were to log out of all devices).

What are others doing in this situation?

all 10 comments

sorted by: hot top controversial new old
[–] 1 point 1 year ago (1 child)

Yubikey for me, I plug it into USB and tap the button. Or in some cases Yubi Authenticator App to generate the OTP if you aren't plugging it into the PC.

  • source
  • hideshow 1 child comment
  • [–] [S] 1 point 1 year ago

    I was thinking of going hardware, and I might still as a backup, bit I think I'll need a software solution as well for family sharing. I'll have to think this through a bit. Thanks.

  • source
  • parent
  • [–] 1 point 1 year ago (2 children)

    What is OTA in this instance? I use OTP with pass-otp but I suspect you're talking about something else.

  • source
  • hideshow 2 child comments
  • [–] [S] 2 points 1 year ago (1 child)

    One time authentication. Same thing, just different name.

    Is pass-otp browser only?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 8 points 1 year ago (1 child)

    I use Aegis as my 2FA for Proton and have my password memorized. Everything else, including all other 2FAs are in Proton Pass

  • source
  • hideshow 1 child comment
  • [–] [S] 1 point 1 year ago

    I used Aegis a long time ago. It was solid. I think I moved away from it for sync reasons (or lack thereof), I'll need to take a look at it again. Thanks for sharing.

  • source
  • parent
  • [–] 3 points 1 year ago

    Memorize my password and use 2FAS for MFA for Proton Pass.

  • source
  • [–] 2 points 1 year ago (1 child)

    At the end of the day, if you want some sort of 2FA for your Proton account, you'll need another service (like Bitwarden), or you'd have to rely on less secure methods (like SMS).

    Keeping your Bitwarden account and only using it to log in to Proton seems like a reasonable way to go.

  • source
  • hideshow 1 child comment
  • [–] [S] 1 point 1 year ago

    Yeah, I'm just looking for choices others are using to compare notes. I like bitwarden a lot, but keeping it for just 1 MFA token is a bit overkill. This is considering bitwarden doesn't allow TOTP codes in their free plan (last I checked).

  • source
  • parent