![](/static/253f0d9b/assets/icons/icon-96x96.png)
![](https://lemmy.dbzer0.com/pictrs/image/a18b0c69-23c9-4b2a-b8e0-3aca0172390d.png)
Is that some sort of ISP-level block?
Sounds like you need a VPN.
Is that some sort of ISP-level block?
Sounds like you need a VPN.
It still defends against one failure mode (the website gets hacked but you’re ok) but yeah, obviously if you get hacked and the hacker knows how to get your vault out then you’re 100% screwed.
My suggestion is always hardware 2FA, even though it’s not as mature as the other systems. Personally I have two Yubikeys (in case one breaks/gets lost) but it does mean that I need to add TOTPs to both of them each time I add a new 2FA.
Only downside with Yubikeys is that you can’t really have backups. The solution is to have two of them, and add the 2FAs to each of them every time you sign up for a new account. It does mean you pretty much can’t have offsite backups though.
Personally I keep a USB-A with NFC one on my keyring and then a UISB-C one at my desk, which covers every device I have.
$70 is typical for that, except it’s 30GB of data for the month before they reduce you to around 25kB/s.