• eerongal@ttrpg.networkEnglish
    17·
    1 year ago

    Definitely opens up a big question about the security of Lemmy instances that I am sure will be discussed over the next few days.

    They added 2FA login to lemmy in one of the newer updates. Probably pretty pertinent for any admins to use it…

    • ebits21@lemmy.caEnglish
      10·
      1 year ago

      It’s buggy and missing some key checks to make sure it’s working when you set it up.

      Real risk of locking yourself out of your account.

        • ebits21@lemmy.caEnglish
          5·
          1 year ago

          Mostly a risk on initial setup.

          I’ve been waiting a bit for it to stabilize and just using huge random passwords

          • Zetaphor@zemmy.ccEnglish
            4·
            1 year ago

            If you’re using a password manager you’d be doing this for every site and without even having to think about it. Bitwarden is a great choice.

            • ebits21@lemmy.caEnglish
              1·
              1 year ago

              Oh I do. Used Bitwarden for many years.

              I actually use keepass for totp codes too.

    • bdonvr@thelemmy.clubEnglish
      3·
      1 year ago

      Also I believe this was achieved through cookie stealing, which 2FA would not have helped