Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Save TOTP secrets and generate TOTP passwords from the various Passky clients #59

Open
Windowsfreak opened this issue Oct 8, 2024 · 1 comment

Comments

@Windowsfreak
Copy link

Piggybacking on #53, it would be awesome if a TOTP secret could be saved on each of the password fields, not just website, username and password, so that TOTP codes can be generated for websites that require them.

Entries with TOTP set up would then have another copy button to copy the TOTP value.

@zigazajc007
Copy link
Member

While 2FA is designed to add an extra layer of security, storing both your passwords and 2FA secrets in the same place defeats the purpose of that additional protection. The idea behind 2FA is to provide a second independent factor for authentication, so if all your credentials are stored in one "basket", you're reducing the effectiveness of 2FA.

For better security, I recommend using a standalone 2FA app like Aegis (for Android) or OTP Auth (for iOS). These apps focus solely on managing 2FA codes, keeping them separate from your password manager.

Keeping both your passwords and 2FA codes together is generally considered poor security practice, which is why Passky does not plan to support storing 2FA secrets.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants
@Windowsfreak @zigazajc007 and others