Hacker News new | ask | show | jobs
by ancientworldnow 710 days ago
Bitwarden has a separate 2fa app so your totp codes aren't in the same password vault (though you can do that, but shouldn't).
1 comments

Why shouldn't you?

I use a Yubikey as the 2FA for my bitwatden, then store all the TOTP codes with the passwords in the same vault. Quite convenient, and also adheres to the principles of MFA

If your one Bitwarden store were compromised in any way, it is game over since it also contains the 2FA codes.

If you were to use two apps / two stores, there is another hurdle.

That is exactly why I do it.