The risk that my 1Password vaults will be compromised is extremely low (much much lower than the disaster with Lastpass), so I'm choosing convenience over this risk.
Saving all of the mfa codes within 1Password, so putting all eggs in the same basket, is a risk I'm going to accept. And I will be able to set up any other devices from there. Then I will be able to sign in to my real Google account on my phone. Then I'm in and have access to all my credentials. Then I download the 1Password app and sign in with the emergency kit info from paper and the OTP from Google Authenticator. Then I download Google Authenticator and scan the 1Password mfa code from paper. On a fresh bought android phone, I login to a temporary freshly created Google account (I don't have any passwords memorized!). Installing LastPass Authenticator is a snap, and if. To recover my accounts from zero, I get the paper prints of my emergency kit and mfa qr code. LastPass Authenticator is separate from the LastPass password manager app, though it offers some synergy with the password manager. So I printed the 1Password mfa QR code on paper. You might have not noticed it yet, but it's possible to scan these mfa QR codes into multiple authenticator apps. That's also cloud-synced within the Microsoft ecosystem, so it's difficult to lose. To profit from the integrated OTP generator in 1Password as well as to avoid some circular dependency (1Password OTP saved within 1Password), I have the OTP for 1Password duplicated in an external authenticator app (Microsoft authenticator, because I need it anyway for the push notification for my Microsoft account).
0 kommentar(er)
