jonathanvmv8fSep 11, 2023

Why do password managers charge for TOTP code generation?

https://lemm.ee/post/7541357

Why do password managers charge for TOTP code generation? - lemm.ee

Is this some sort of a convenience feature hidden behind a paywall to justify purchasing their subscriptions or does generating the codes actually cost money? If the latter is the case, how do applications like Aegis do it free of cost?

Show threadddnomadSep 11, 2023
Please don’t use your password manager for TOTP tokens. It is called two factor authentication for a reason.
Show threadbeebSep 11, 2023
The reason that 2fa exists is not to protect you if someone gets their hands on your device. It’s to protect you if your “static” credentials leaked from a providers’ database or you otherwise got phished. Using a password manager to handle mfa is totally reasonable.
Show threadddnomad
It is reasonable yet subpar under a threat model where you do not trust any single provider, which is a threat model I find appropriate most of the time.
Sep 12, 2023 at 10:48amWeb