November 14, 2025
r/selfhosted — Should You Store TOTP Codes in Your Password Manager?
Reddit discussion on the security trade-offs of storing 2FA TOTP codes alongside passwords in a password manager. The top-voted answer argues that unless you’re a high-profile target, the convenience outweighs the risk, and having 2FA at all already defeats most remote attacks. Debate covers threat models, phishing resistance, and whether separate 2FA apps are worth the friction.