3 ms·
The difficult question regarding two factor authentication is "what do you do if you lose the second factor?" The answer to that question can often range all t
by crdoconnor 10y ago
The difficult question regarding two factor authentication is "what do you do if you lose the second factor?"
The answer to that question can often range all the way from "your account is lost forever" to "you have to go through a whirlwind of bureaucratic pain" to "the alternative method of entry is easy, hassle free, and how your account will end up compromised."
- skookum 10y agoYubico's answer to this is to own & register two of them against the account/software they are being used as the 2nd factor for. Some accounts also offer something short of the whirlwind but not as socially engineerable as the obvious easy, hassle free methods - for example Google issues backup codes for signing into the account when you lose all your means of 2FA.
- chrismeller 10y agoOut of curiosity, do you actually have your backup codes somewhere? I know I did at some point, but the things you don't use, you lose...