4 ms·

Google will also let you move your Authenticator to a new device with access to the account from another trusted device without needing to 2FA. So, for example

Google will also let you move your Authenticator to a new device with access to the account from another trusted device without needing to 2FA. So, for example, I can temporarily move Authenticator to an tablet if my phone is lost/stolen using my laptop, which is already trusted. There are some potential security drawbacks to this but access to a trusted device seems a reasonable compromise between security and convenience.

sebcat 9y ago
Also worth noting: Google Authenticator is just TOTP[1] (X=30, Digit=6, HMAC-SHA-1 IIRC). You can just copy the URL from the QR code and use it from whatever you like, as long as your clock is somewhat synced. [1] https://tools.ietf.org/html/rfc6238 https://tools.ietf.org/html/rfc6238