Hacker News Reader

I add the TOTP to my 1Password vault, I try not to use SMS for 2FA. That said, I should start keeping a list of all my accounts that _require_ SMS for 2FA

View on HN

I do the same thing with 1Password. I also created a 1Password label/ tag “sms_2fa” that I throw on all the accounts that required it.

Helps keep track of potential weak spots and it’s easy to go through once a year and see if things have improved

In my segment of reality-as-we-know-it, "2FA" _always_ means "SMS."

Reply on news.ycombinator.com