To integrate 2FA with keepass perform the following steps

  1. Enable 2FA in settings, save it . If 2FA installation link button is not visible, refresh page to see it.

  2. Copy the link and extract the secret key from it. Example: otpauth://totp/Lemmy.world:echo0618secret=XXXXXXXXXXXXXXXXXXXXXXX&algorithm=SHA256&issuer=Lemmy.world Here secret key = XXXXXXXXXXXXXXXXXXXXXXX

  3. Go to keepass and setup your TOTP with the secret key and use custom setting to generate the key, with Algorithm = SHA-256, keeping the other settings unchanged

https://lemmy.world/pictrs/image/ace6eb80-daf0-4dcb-9a45-919ae9e74e4e.png

  1. Save the TOTP changes. Go incognito mode and login.
  • TurnItOff_OnAgain@lemmy.worldEnglish
    2·
    1 year ago

    Just a note that 2fa wouldn’t have helped with the most recent vulnerability. The attackers were grabbing your already authenticated session and re-using that.