Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> But that also means that if your password manager is compromised, 2FA is broken as well

Sure, but if your password manager is compromised, you are fucked anyway.



Not if you use MFA as designed: they’d still need to snag your token(s) to complete a login.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: