Currently I use Bitwarden for storing passwords and Aegis for 2fa. Is is okay to store recovery codes in my Bitwarden vault or I should store them in somewhere else like Tresorit, Dropbox with cryptomator.

  • frozenfoxx@lemmy.worldEnglish
    5·
    11 months ago

    There are a few options, all with trade offs.

    • keep them in Bitwarden. This isn’t a bad idea as long as you do regular backups of Bitwarden. If you lose it though then the codes are lost, too.
    • print out and store screenshots of the 2FA codes. You can do this in a safe, you can even laminate them.
    • store screenshots of the 2FA codes on digital storage. In the case of a USB drive you can put it in a safe or on a NAS. Naturally that means someone in your home network may have access but that may not be a big part of your attack surface. If using an external device this may not be a bad time to have plaintext dumps of Bitwarden as well just in case.

    Some combination of these can work very well, just need to decide what your attack surface looks like.

    • ansik@kbin.social
      2·
      11 months ago

      I lost my home to a fire a couple of years back, would’t recommend only paper copies of 2FA codes. Recovery was a lengthy process.

      • Confetti@lemmy.worldEnglish
        2·
        11 months ago

        If someone does go this route I suggest following the 3,2,1 rule. The offsite copy specifically would protect from fires and pretty much anything else that can happen to your house. The same should be said if you use a paper emergency sheet. A good offsite place can be like a safety deposit box or a trustee’s bolted down safe