3 ms·
With Google Authenticator you would have to use your one-time codes to reset it if your phone is lost. With 1password the 2FA is no longer linked to the phone,
by sytse 10y ago
With Google Authenticator you would have to use your one-time codes to reset it if your phone is lost. With 1password the 2FA is no longer linked to the phone, this way you don't have to reset.
- ribosometronome 10y agoGoogle will also let you move your Authenticator to a new device with access to the account from another trusted device without needing to 2FA. So, for example, I can temporarily move Authenticator to an tablet if my phone is lost/stolen using my laptop, which is already trusted. There are some potential security drawbacks to this but access to a trusted device seems a reasonable compromise between security and convenience.
- sebcat 10y agoAlso worth noting: Google Authenticator is just TOTP[1] (X=30, Digit=6, HMAC-SHA-1 IIRC). You can just copy the URL from the QR code and use it from whatever you like, as long as your clock is somewhat synced. [1] https://tools.ietf.org/html/rfc6238 https://tools.ietf.org/html/rfc6238