6 ms·
It's best to have the codes on multiple devices. Might not help in the short term ie 'left my phone and won't be home to use my tablet until 9'. But in the ev
by jethro_tell 10y ago
It's best to have the codes on multiple devices. Might not help in the short term ie 'left my phone and won't be home to use my tablet until 9'.
But in the event our phone was stolen, it can get pretty tough to recover some accounts once you've set up 2fa. If it's not, then there's really no point in having 2fa on the account at all.
EDIT:
Also of note, If you don't have a second device, a yubi key will store all the codes on the key. So any phone/laptop with the yubico auth app will be able to show the codes if you wanted to use that for a backup.
- jrochkind1 10y agoWell, the kind of 2fa that simply sends you a text message, once you get a new phone with the same phone number, you're back in. Which can happen pretty quickly. But yeah, I think there are probably a variety of 2fa nightmares that we'll only start encountering/discovering in the near futre, some amount of time after 2fa reached critical mass.
- riffraff 10y agoif your services doesn't provide fallback options for 2FA (TOTP/SMS/paper codes) I'm inclined not to consider enabling 2FA at all, it's just too risky.
- jethro_tell 10y agoI dislike sms since the most likely device I own to get stolen is my phone. Also, the codes aren't sent to your locked secured phone, they are sent to your SIM card. Paper codes are the same as having a second device with TOTP, you probably won't carry them with you everywhere (both should be an offsite backup).