They protect against very different things, and your Master Password is ultimately what’s protecting your data. This also means that enabling two-factor authentication or Duo does not mean that you can have a weaker Master Password. SRP protects both your password and the additional factor. Without SRP the same attacks that could disclose your password to an attacker eavesdropping on a connection could also disclose your additional authentication factor. The SRP handshake needs to occur and all additional factor requests get the benefits of that secure channel.
The awesome part about these additional factors during authentication is that they get to stand on the shoulders of Secure Remote Password. Use the authenticator app to get the current one-time password, punch it in and you’re off to the races.ĭuo is a great option if you’re looking to enforce the use of an additional factor across a whole team. When it comes to backups, the more the merrier, just like Mom said! 🙂Īny time you sign in to your account from a new device you’ll be prompted for a one-time password. Ideally you’d store it in both so you have access to it when needed. 1Password has been a TOTP authenticator for years now and storing it there is very convenient, but we recommend also storing it in an authenticator app like Authy. When setting up two-factor authentication, you’ll be provided with a TOTP secret that you can store in an authenticator app of your choosing. TOTP is a widely adopted standard and it’s a great way of adding a familiar additional factor to your authentication process. Time-based One-Time Passwords is a mouthful, so forgive me for abbreviating it to TOTP from here on out. Two-factor authentication in 1Password is implemented with Time-based One-Time Passwords. We’ve added two more to the guest list, and you get to invite whichever you’d like.
And why shouldn’t that apply to authentication factors? You have your Master Password and Secret Key, and they’re combined to be one amazingly strong factor via Secure Remote Password. The more the merrier, my mother likes to say.
0 kommentar(er)
