Hacker News Reader

Bitwarden

I don't really like the idea of TOTP and passwords in the same place. If it gets compromised someone has both your password and TOTP code.

Yep I agree so I use 1Password only for passwords and Bitwarden only for TOTP.

I use Bitwarden for passwords only. I use Authy for the TOTP, although I should use something else.

I backup my TOTP seeds in KeepassXC. I also have an offline backup of my Bitwarden vault that is in a separate KeePassXC vault. I agree that I don't like the idea of one vault holding both bits of info.

Is there an easy way to import from authy to bw? Or do I have to do one at a time.

Sorry I'm not sure.

The officially supported method is to login to each 2FA account and delete the old 2FA and generate a new one that you make sure to record separately. Authy really locks you in.

There are some unsupported methods a Google search away. I have had luck with this one in the past but haven't used in over a year, so can't vouch for it still working.

https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d...

Reply on news.ycombinator.com