|
|
|
|
|
by cassianoleal
903 days ago
|
|
> sites implementing 2fa don't make it easy to share the keys Sites that offer TOTP as a second factor normally either have the seed printed out next to the QR code, or have a button (or link) to show it. It's a major hassle to scan a QR code from the laptop screen without leaving the laptop, whereas copy-pasting the seed into the password manager is easy. Pasting it somewhere you can share with other people is just as easy since the seed is just a string of characters. There's also the fact that TOTP is an open standard, so one could very easily implement a bit of software that translated the QR code into the seed, so there's really no point at all for websites to try to protect the seed from the user. The user owns the seed and the code. |
|