4 ms·
This anecdote makes me very happy with AWS. I want loss of 2FA to completely revoke access to my account. Otherwise any smart hacker can social engineer Amazon
by aianus 9y ago
This anecdote makes me very happy with AWS. I want loss of 2FA to completely revoke access to my account. Otherwise any smart hacker can social engineer Amazon support with some fake drivers license photo and steal all my BTC (for example).
- calcifer 9y agoSo what is your plan in case your phone gets lost/stolen/whatever and you lose access to your TOTP app?
- Ajedi32 9y agoUse the backup codes they provided you with when you set up 2FA. Or does Amazon not have those? (If not that seems really strange, every other service I've set up 2FA on has that recovery method.)
- mirekrusin 9y agoThey don't provide backup codes.
- aianus 9y agoI have encrypted backups of all my 2FA secrets in two locations. I change phones every year and have never lost an account.
- Corrado 9y agoI use Authy as my TOTP client. It has a encrypted backup feature and allows me to share tokens between my devices (computer, phone, iPad, etc.) It's saved me on more than one occasion. :)
- Sohcahtoa82 9y agoYeah, that sounds good and all, but what happens if you lose your 2FA then?