Forum Discussion

Anonymous's avatar
Anonymous
3 years ago

Watchtower Score + MFA

Hey there - I've a question about your 1Password "score" Does adding MFA tokens to 1Password alter your Watchtower score - my assumption is yes :) If so, does it increase or decrease as tokens ...
windows
Anonymous's avatar
Anonymous
2 years ago

Sorry to drag up old threads - but this message from Lastpass (where I've come from) makes me a lot happier MFA tokens were never stored in their service (and also alarmed it increases the watchtower score).

With over 50 TOTP codes, this would be a nightmare (assuming not already compromised!)

```
Task 4.3: Using the LastPass Authenticator to store additional TOTP codes

If you are using the LastPass Authenticator to store TOTP codes for applications other than access to your LastPass vault (e.g. LinkedIn, Facebook, etc.) AND you have “Save accounts to the cloud” enabled, the TOTP seeds used to generate the six-digit TOTP codes in your LastPass Authenticator are backed up to your LastPass vault using zero knowledge.
If you determined via Topic 1 and Topic 2 that either your master password strength or iteration count were insufficient, you may want to consider the following:

Log in to the application using the existing TOTP codes from your LastPass Authenticator.
Temporarily disable the 2FA/MFA configuration.
Delete the TOTP entry in your LastPass Authenticator (instructions here).
Re-enable 2FA/MFA configuration in the application, which will enable you to re-enroll your LastPass Authenticator.

```