This kind of defeats the point of 2FA. With your current setup, if anyone access... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

latexr on March 28, 2018 | parent | context | favorite | on: The 1Password 7 Beta for Mac

This kind of defeats the point of 2FA. With your current setup, if anyone accesses your vault and gets your password they also get your 2FA key.

At that point it’s no longer two-factor, it’s just two steps in the same authentication.

AGKyle on March 28, 2018 [–]

We've written about this in the past, see a blog post by our chief of security here:

https://blog.agilebits.com/2015/01/26/totp-for-1password-use...

Hope that clears things up for both of you. Let me know if you have any questions though!

Kyle

AgileBits

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact