Yeah basically, but MFA is honestly not that needed if you use a password manager, secure passwords and URL based autofill. MFA was invented to protect plebs that use bad passwords and easily fall for phishing sites.
Yeah but in that sense my method still fulfills that requirement. They would need to actually get access to my locally stored kdbx file and my master key. If they get that then everything is fucked anyways.
Realistically speaking, MFA most importantly is to get away from the “something you know” factor since that is generally more vulnerable. Even if it is a single factor, it’s a better factor.
Also enables people to meaningfully have multiple factors if they choose. The password managers generally require a master passphrase and/or unlocking through something like “Windows Hello”
Isn’t that effectively back to single factor?
Yeah basically, but MFA is honestly not that needed if you use a password manager, secure passwords and URL based autofill. MFA was invented to protect plebs that use bad passwords and easily fall for phishing sites.
It’s still good practice even if your password is secure. That way bad actors would still need your MFA code if your data ever gets leaked or stolen.
Yeah but in that sense my method still fulfills that requirement. They would need to actually get access to my locally stored kdbx file and my master key. If they get that then everything is fucked anyways.
Realistically speaking, MFA most importantly is to get away from the “something you know” factor since that is generally more vulnerable. Even if it is a single factor, it’s a better factor.
Also enables people to meaningfully have multiple factors if they choose. The password managers generally require a master passphrase and/or unlocking through something like “Windows Hello”