All you have to do is select “dual-factor authentication” from the menu of the website, and confirm the method you wish to use later to verify your identity. The setup is usually completed in a few clicks. The details of the process may vary, but the idea is the same - it’s a second layer of security that, even in the case of password theft or data breach, can keep unauthorized users out of your account. Once the login is confirmed, the login attempt is authorized. The process is completed by either inputting an additional code that’s sent to you, or by clicking on a notification. The way 2-factor authentication works is pretty straightforward:Įach login attempt to an online service requires verification by the account owner. It is an extra security layer that many services and websites offer as an optional addition to their standard login process. The risk that my 1Password vaults will be compromised is extremely low (much much lower than the disaster with Lastpass), so I'm choosing convenience over this risk.Two-factor authentication is an additional password you need to enter before you can access your account. Saving all of the mfa codes within 1Password, so putting all eggs in the same basket, is a risk I'm going to accept. And I will be able to set up any other devices from there.

Then I will be able to sign in to my real Google account on my phone. Then I'm in and have access to all my credentials. Then I download the 1Password app and sign in with the emergency kit info from paper and the OTP from Google Authenticator. Then I download Google Authenticator and scan the 1Password mfa code from paper. On a fresh bought android phone, I login to a temporary freshly created Google account (I don't have any passwords memorized!). To recover my accounts from zero, I get the paper prints of my emergency kit and mfa qr code. So I printed the 1Password mfa QR code on paper. You might have not noticed it yet, but it's possible to scan these mfa QR codes into multiple authenticator apps. That's also cloud-synced within the Microsoft ecosystem, so it's difficult to lose. To profit from the integrated OTP generator in 1Password as well as to avoid some circular dependency (1Password OTP saved within 1Password), I have the OTP for 1Password duplicated in an external authenticator app (Microsoft authenticator, because I need it anyway for the push notification for my Microsoft account).

Lastpass two factor authentication