You can even mark a device as “trusted”, so you won’t be prompted for codes on that device while your account remains protected by two-factor authentication. Even if your password is compromised, your account can’t be accessed without the two-factor authentication code. Two-factor authentication improves your digital security by protecting your account with an additional login step. Safeguard your LastPass account by requiring two-factor authentication codes when signing in. With one-tap verification and secure cloud backup, LastPass Authenticator gives you all the security, without any of the frustration.
The risk that my 1Password vaults will be compromised is extremely low (much much lower than the disaster with Lastpass), so I'm choosing convenience over this risk.LastPass Authenticator offers effortless two-factor authentication for your LastPass account and other supported apps. Saving all of the mfa codes within 1Password, so putting all eggs in the same basket, is a risk I'm going to accept.
And I will be able to set up any other devices from there. Then I will be able to sign in to my real Google account on my phone. Then I'm in and have access to all my credentials. Then I download the 1Password app and sign in with the emergency kit info from paper and the OTP from Google Authenticator. Then I download Google Authenticator and scan the 1Password mfa code from paper.
On a fresh bought android phone, I login to a temporary freshly created Google account (I don't have any passwords memorized!). To recover my accounts from zero, I get the paper prints of my emergency kit and mfa qr code. So I printed the 1Password mfa QR code on paper. You might have not noticed it yet, but it's possible to scan these mfa QR codes into multiple authenticator apps. That's also cloud-synced within the Microsoft ecosystem, so it's difficult to lose. To profit from the integrated OTP generator in 1Password as well as to avoid some circular dependency (1Password OTP saved within 1Password), I have the OTP for 1Password duplicated in an external authenticator app (Microsoft authenticator, because I need it anyway for the push notification for my Microsoft account).
0 kommentar(er)
