Plans to include TOTP & Passkeys?

Okay…you’d want free Norton Password Manager cloud vault to include free KeePass local vault features.

=====================================================

AI Overview
Password managers with integrated authenticators offer convenience by combining password storage and two-factor authentication (2FA) in one app, while dedicated authenticator apps provide a separate layer of security. Both methods have their pros and cons. Integrated authenticators simplify the login process, but may pose a security risk if the password manager is compromised. Dedicated authenticator apps offer better isolation, but require managing another app.

Password Manager Integrated Authenticator:

Pros:

  • Convenience:
    Users only need to manage one app for both passwords and 2FA codes.

  • Simplified login:
    Autofill features can streamline the login process by automatically filling in both the password and the 2FA code.

  • Backup and sync:
    Many password managers offer cloud backup and sync features, ensuring that 2FA codes are not lost if a device is lost or damaged, and can be accessed from multiple devices.

  • Familiar interface:
    Users are already familiar with the password manager interface, making it easier to set up and use.

Cons:

  • Security risk:
    If the password manager is compromised, both passwords and 2FA codes are vulnerable, potentially leading to account takeover.

  • Single point of failure:
    All security eggs are in one basket, meaning a breach of the password manager can compromise all associated accounts.

Separate Authenticator App:

Pros:

  • Enhanced security:
    By keeping 2FA codes separate from passwords, a breach of the password manager does not automatically compromise all accounts.

  • Independent security:
    Authenticator apps can be used with any password manager or even without a password manager, providing flexibility and independent security.

  • Stronger isolation:
    Dedicated authenticator apps offer better isolation, making it harder for attackers to gain access to both passwords and 2FA codes.

Cons:

  • Less convenient:
    Requires managing another app and potentially switching between apps during login.

  • Potential for loss:
    If the authenticator app is lost or deleted, access to accounts protected by 2FA may be lost.

  • Backup and sync limitations:
    Some authenticator apps, like Google Authenticator, have limited backup and sync options, which can lead to data loss.

Choosing the right approach:

  • Security-conscious users:
    Users who prioritize security may prefer a dedicated authenticator app for stronger isolation.

  • Convenience-focused users:
    Users who value convenience may prefer a password manager with an integrated authenticator.

  • Threat assessment:
    Users should consider the potential threats they are trying to mitigate and choose the approach that best fits their needs and risk tolerance, according to Information Security Stack Exchange.

AI responses may include mistakes.

===================================================

AI Overview
Using passkeys with Norton Password Manager provides enhanced security and convenience compared to passwords alone. Passkeys offer phishing-resistant authentication, while Norton Password Manager helps manage and secure your passkeys and other passwords in a centralized, encrypted vault. This combination allows for stronger security and a smoother user experience.

Benefits of using passkeys:

  • Stronger security:
    Passkeys are more resistant to phishing and hacking attempts than passwords. They are designed to be inherently secure, unlike passwords which can be weak, reused, or compromised.

  • Convenience:

Passkeys eliminate the need to remember and type complex passwords. They allow for seamless and faster sign-ins.

  • Reduced risk:
    Passkeys are device-specific and cannot be used on malicious websites, even if a user accidentally visits a phishing site, according to Dashlane.

Benefits of using Norton Password Manager with passkeys:

  • Centralized management:
    Norton Password Manager allows you to store and manage your passkeys alongside your other passwords, making it easier to keep track of your credentials.

  • Secure storage:
    Norton Password Manager stores your passkeys and other sensitive information in an encrypted vault, ensuring that only you have access to your data.

  • Enhanced security:
    By using Norton Password Manager to store your passkeys, you can ensure they are kept safe and secure, further minimizing the risk of them being compromised.

  • Password management:
    Norton Password Manager can also help you create and manage strong, unique passwords for accounts that don’t yet support passkeys, further enhancing your overall security posture.

In essence, using passkeys with Norton Password Manager allows you to:

  • Leverage the enhanced security of passkeys for supported websites and services.
  • Securely store and manage your passkeys alongside other passwords in a trusted, encrypted environment.
  • Benefit from the convenience of passkeys without sacrificing the security of your online accounts.

AI responses may include mistakes.

=========================================

What Is a Passkey? here

@sushicombo If you actually need assistance, it would be much appreciated for you to refrain from targeting those who are trying to assist with insults. I have had my share of that recently and personally don’t tolerate it when trying to help others. We aren’t stupid here on the forums and are not insinuating others to be either.

My post specifically outlines how logging into your Norton account is a requirement to even use NPWM in the first place. Having 2FA set on your Norton account is directly linked to your vault password. Backup 2FA codes can also be generated.

Additionally, Guru bjm, xjoex and I have both laid out how that works. In detail. We have also stated that we do not have privy access to Norton development. I specifically gave my “opinion” regarding what I believe is the reason Norton isn’t including passkey support in its present form for PWM. We have NOT said they won’t in the future, again, we don’t have privy access to that information. Those are the best and direct answers we can give here on the forums.

Regards,
SA

1 Like

IF you require TOTP I suggest using another PWM that does until Norton integrated it into their current products. I use Norton PWM and a separate FIDO2 hardware device. They both work for me as advertised.

Regards,
SA

I wasn’t asking for a solution or alternative, this thread was created to issue a suggestion to include an option that should be standard to most PWM’s.

You guys have gone to great lengths at explaining something I’m fully aware of.

Product Suggestions here
Product Feedback here

We’re Norton Community.
Maybe, some community users (me) are not as fully aware.
Regards w Respect

Moving this thread to the product suggestions board.

Regards,
SA

Bitwarden launches passkey management here
Bitwarden - How do passkeys work? here
Bitwarden Authenticator offers an integrated or dedicated authenticator app here