We can use Authenticator or SMS/Email to unlock.
Work with TPM chip.
We want to use 2FA in addition to the master pass to verify the user's presence. We cannot use it instead of pass because that is needed to encrypt data, and it's safer to keep it outside of these systems.
Instead of asking for pass + 2FA every time to unlock, we could have an option like 'remember pass' (in the OS keyring) and, on unlock requests, just the 2FA. This would make user interaction more straightforward.
See also #228
We can use Authenticator or SMS/Email to unlock.
Work with TPM chip.
We want to use 2FA in addition to the master pass to verify the user's presence. We cannot use it instead of pass because that is needed to encrypt data, and it's safer to keep it outside of these systems.
Instead of asking for pass + 2FA every time to unlock, we could have an option like 'remember pass' (in the OS keyring) and, on unlock requests, just the 2FA. This would make user interaction more straightforward.
See also #228