Reply to thread

Message

<blockquote data-quote="HarborFront" data-source="post: 1017301" data-attributes="member: 55987">I might be wrong. Correct me if I&#039;m wrong, for I&#039;m considering the use of a Password ManagerOf course, everything can be hacked regardless of 2FA/MFA. What we want is to make things difficult to hack the Password Manager2FA deploys say a master password and a TOTP code send to your phoneA TOTP code is useless to be used a second time since it&#039;ll expire after say 30 sec or 60 sec. You&#039;ll need to generate another TOTP if it expiresAs for the master password, you need to physically key in and that&#039;s where a keylogger can capture it. To strengthen it, you&#039;ll need to use a randomized virtual onscreen kb with delay key setting and anti-screen capture/anti-clipboard capture or encrypted keystrokes/hidden keystrokes etc to key the master password each and every time. The weakness is that if your master password is of 80 characters, and you need to access 50 websites every day, then it becomes an issue to remember and a hassle to use.Looks like a new kid in the block. Anyone using it?[URL unfurl=&quot;true&quot;]https://liso.dev/[/URL]It&#039;s at github[URL unfurl=&quot;true&quot;]https://github.com/Liso-Vault/app[/URL]</blockquote>

[QUOTE="HarborFront, post: 1017301, member: 55987"] I might be wrong. Correct me if I'm wrong, for I'm considering the use of a Password Manager Of course, everything can be hacked regardless of 2FA/MFA. What we want is to make things difficult to hack the Password Manager 2FA deploys say a master password and a TOTP code send to your phone A TOTP code is useless to be used a second time since it'll expire after say 30 sec or 60 sec. You'll need to generate another TOTP if it expires As for the master password, you need to physically key in and that's where a keylogger can capture it. To strengthen it, you'll need to use a randomized virtual onscreen kb with delay key setting and anti-screen capture/anti-clipboard capture or encrypted keystrokes/hidden keystrokes etc to key the master password each and every time. The weakness is that if your master password is of 80 characters, and you need to access 50 websites every day, then it becomes an issue to remember and a hassle to use. Looks like a new kid in the block. Anyone using it? [URL unfurl="true"]https://liso.dev/[/URL] It's at github [URL unfurl="true"]https://github.com/Liso-Vault/app[/URL] [/QUOTE]

Verification