5 ms·
Well the totp (even in your passwd manager) defends against phishing I'd thought vs password alone.
by sceutre 4y ago
Well the totp (even in your passwd manager) defends against phishing I'd thought vs password alone.
- lxgr 4y agoFor a "service based" password manager, sure. (It can prevent the service from ever handing over your encrypted database to an attacker.) In a local password manager, it doesn't work like that. A challenge-response mechanism can help there, but the cost/benefit analysis looks pretty different there, IMO.