5 ms·
So you store the password and the TOTP in KeePass? Seems that you have 1FA, hacking your KeePass is enough to own you.
by megapatch 5y ago
So you store the password and the TOTP in KeePass? Seems that you have 1FA, hacking your KeePass is enough to own you.
- CarelessExpert 5y agoNo, that would be silly. They're stored in separate databases with different passwords. If I was really paranoid I'd keep the TOTP database on a separate device but, frankly, I don't anticipate being the target of a motivated attacker so that's more than I feel is necessary given the threat models I'm concerned about, those being untargeted hacks (service breaches, driveby attacks, etc) and social engineering.