Is it safe to use 2FA within a password manager?

[@jasenbourne1]

Yes, please make a SEPARATE password manager. The 2FAS app is excellent!

[@2FAS]

We're not planning to do that right now, but we'll see in the future!

[@bsaednnmgointuvtjstairhvrqujnb]

​@@2FASPlease!! 😢

[@Soulreigner]

I use both Bit Warden and 2FAS. I can't do without them now as they make life so much easier and more secure. I do agree with you about not integrating them but I would be interested if 2FAS created a separate password manager! As usual, an awesome video!

[@2FAS]

Who knows what the future holds? But no plans for that at the moment. Maybe. Not really... It's classified 😉

[@Unnamed456]

​@@2FAS I'm using the same combination! And I agree, the way that you make apps is just another level 💯 so it could be cool to see a password manager made from you. The way you make the syncing with Google Drive is flawless.

[@2FAS]

Well thank you 😊

[@gemiro1234]

Hi, great video! I also use Bitwarden as password manager and Aegis as 2FA app. While watching your video I realized that to access my Bitwarden vault in new devices I set a 2FA with email. Is it recommended to use 2FA on the main password manager? or does it just increase the risk to be locked out?

[@2FAS]

Generally, 2FA is always recommended to increase the security. To avoid losing access to anything, you should do cloud and manual backups. This way, you'll be both safe and won't have to worry about anything. 😁

[@Still_thinking-D]

Just one simple / curious qus : why some authenticator apps are using SHA1 encryption and some are giving more SHA options ? ( Might be stupid qus so 😅 )

[@2FAS]

The choice of algorithm is not a matter for the application. This is set by the service that generates the QR / secret key. The app can only handle the encryption in question. SHA1 is the default and most commonly used, but some apps use other algorithms.

[@Asrdasa]

The “true 2FA” requires password manager and the 2fa tokens to be on separate devices, not just on different apps. Very few people have the “true 2fa” set up in this sense. I know a few people who have a dedicated phone for nothing else but 2fa, or who store their 2fa tokens on hardware keys like some models of Yubikey that allow you to store some TOTP on them, but these people are outliers, and the vast majority of us have at least one device that has both the password manager AND the 2fa authenticator on it (most probably their smartphone). Given and accepting this state of affairs, all that a developer that wishes to offer password manager and 2fa authenticator in a “single app” would need to do is to just separate the password vault and 2fa token vault, and make the user set different passwords for the two vaults. Effectively and functionally, this would make the password manager and 2fa authenticator two separate apps even though they are housed under a “single app”.

[@Ranger-8013]

Yeah when you think through it, advising to keep separate apps doesn’t make much sense. If your password manager is compromised, how did that happen? Device compromise? In that case, why is it assumed 2FAS is secure? Secondly, if a single app is ok for storing passkeys, then why are two apps required for password+TOTP? Third: two separate passwords? Why not just have a little longer single password on just your password manager? If anything, two separate apps increases the risk of lockout because there would be one additional point of failure: two possible passwords that could be forgotten, two apps whose failure could lock you out, two apps whose misconfigured backups could lock you out, etc.

[@therealassassin]

will there be a app in the future for pc?

[@2FAS]

Either an app or a standalone BE, we'll see.

[@KrypteiaXi]

I have exported my seeds on android, I have transferred the .bat file to my iphone, I am trying to import the seeds to my iphone, AND IT IS NOT WORKING. I NEED TO TRANSFER THOSE SEEDS ASAP. Why is it not working? I am trying to find a relevant guide video or answer online and there is none. Please help me out, thanks.

[@2FAS]

If you want to export the codes between systems, you can use the tool that's implemented in our app. Go to 2FAS Backup in the settings, and export a file with all your codes. It will have a .2fas extension, but it's a .json file, then import it on the second device. All of your codes will get transferred.

[@AnimeFreak10267]

Hi, my sister was recently in a severe car accident and her phone was thrown out of the window of her car and damaged. We managed to pay someone to retrieve her photos and videos. I set up 2FAS on her phone and we did save the back up codes. Her facebook was logged in on her iPad so we were able to turn it off for Facebook but we have been unable to get back into her Instagram account and it’s her favourite app and she’s posted so many beautiful pics of her bunnies which are her babies and also has an account for herself. We tried to use the back up codes but none of them worked and have been unsuccessful. We don’t know how to log into 2FAS and are unsure of what to do but I really want to help her. Do you have any advise for us?

[@2FAS]

Is her iPad logged into the same account? If it is, download the 2FAS app there, and if the iCloud backup was enabled on her phone, all the codes will be restored on the iPad.

[@fxst_yt7099]

DUDE I DIDNT EVEN MAKE A PIN WHY IS THERE PIN

[@2FAS]

If you have the Pin enabled in our app, this must mean that you have enabled it in the past.

[@fxst_yt7099]

@@2FAS oh yeah sorry i forgot about it

[@2FAS]

Not a problem

[@Memee833]

Heyup

[@2FAS]

Hello there

[@yukiuwu7]

Just wanna say i appreciate the work you've done on 2fas i use it everyday i appreciate your efforts thank you!

[@2FAS]

You're more than welcome! And we thank you for your kind words 😊