3 ms·
> 4. Which paragraph are you refering too? When I try to reset my Gmail password it boils down to: "dude you forgot your password, no backup email... we cant he
by IanCal 9y ago
> 4. Which paragraph are you refering too? When I try to reset my Gmail password it boils down to: "dude you forgot your password, no backup email... we cant help here".
Checking now, I cannot setup a gmail account without a phone number or backup email. I can also reset my password as long as I have access to my phone which is currently logged in.
> In the end of any authentication scheme there will be a password that you just cannot forget. In SecureLogin we removed unnecessary levels of "backups" and "recovery codes", our scheme boils down to one master password, not to master password and backup file/paper/SIM card/email account etc.
I don't think a backup is "unnecessary". It lowers the chance of being completely locked out.
What happens if I forget my master password? Does it mean I can never log into the sights using the same account ever again?
- homakov 9y agoBackup with 3rd party == giving up access to 3rd party. #1 principle of this protocol is not giving up access, at least by default. You are free to email your password to yourself, write it on a note, but it will never offer to send your password on your phone number. We live in a hostile world. > Does it mean I can never log into the sights using the same account ever again? It's up to the websites, they could use your email for reset + lots of personal info you have about account activity.
- md_ 9y agoRight. My point was only that most people may want a lost-password fallback; this scheme doesn't prevent implementers from providing that, so it's not really a big deal.