this post was submitted on 08 Sep 2023
86 points (94.8% liked)
Open Source
31122 readers
285 users here now
All about open source! Feel free to ask questions, and share news, and interesting stuff!
Useful Links
- Open Source Initiative
- Free Software Foundation
- Electronic Frontier Foundation
- Software Freedom Conservancy
- It's FOSS
- Android FOSS Apps Megathread
Rules
- Posts must be relevant to the open source ideology
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon from opensource.org, but we are not affiliated with them.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I personally use Bitwarden for my 2FA needs. As others mentioned you can self host the server but personally I have no reason not to trust their SaaS solution, especially now that they offer EU hosted servers. If all you want is a basic authenticator app that does only one thing give FreeOTP a try, it's made my RedHat. You can then sync the applications state.
I use bitwarden for 2FA as well. The only issue I have is that I need another solution as well since I also have 2FA activated on my bitwarden account. You can't have bitwarden 2FA saved on bitwarden. (Well you can but that's obviously a bad Idea)
Then I guess use a hardware key for Bitwarden and 2FA (saved in Bitwarden) for the websites that don't support it. Or bitwarden could implement something like 1Password's second password mechanism. That would most likely solve tge 2FA issue.
Yeah, I use Yubikeys for my password manager 2FA and keep all other OTP seeds with their respective creds in Bitwarden
That is true. But that'd be the case for any online/cloud 2FA service. So you could either have a local 2FA app just for Bitwarden or set up less secure but more convenient email 2FA.