Kairos@lemmy.today to Programmer Humor@programming.dev · 2 days agoThese F-ing Logins Nowadayslemmy.todayimagemessage-square299linkfedilinkarrow-up11.08Karrow-down129
arrow-up11.05Karrow-down1imageThese F-ing Logins Nowadayslemmy.todayKairos@lemmy.today to Programmer Humor@programming.dev · 2 days agomessage-square299linkfedilink
minus-squarehitmyspot@aussie.zonelinkfedilinkarrow-up5·1 day agoTrue, but to access bitwarden you need a device already logged in to bitwqrden or the TOTP for bitwarden, so effectively overly 2FA. Also, the purpose of a password manager is unique secure passwords, so most users start off more secure.
minus-squareTrumpetX@programming.devlinkfedilinkEnglisharrow-up1arrow-down2·1 day agoYou’re not wrong at all that it’s still more secure than most. But it’s still not mfa in that case unless you have separate mfa to get into Bitwarden/LastPass/etc, THEN you could make an argument that it’s mfa by proxy.
minus-squarehitmyspot@aussie.zonelinkfedilinkarrow-up1arrow-down1·1 day agoA seperate 2fa is the default for bitwarden. It used to not be but was changed about 6-12 months ago.
True, but to access bitwarden you need a device already logged in to bitwqrden or the TOTP for bitwarden, so effectively overly 2FA.
Also, the purpose of a password manager is unique secure passwords, so most users start off more secure.
You’re not wrong at all that it’s still more secure than most. But it’s still not mfa in that case unless you have separate mfa to get into Bitwarden/LastPass/etc, THEN you could make an argument that it’s mfa by proxy.
A seperate 2fa is the default for bitwarden. It used to not be but was changed about 6-12 months ago.