3 ms·
For my personal email (gmail) I only recently went to Google Authenticator because I finally figured out how to put it on multiple devices. I was worried abou
by supernova87a 8y ago
For my personal email (gmail) I only recently went to Google Authenticator because I finally figured out how to put it on multiple devices. I was worried about the SMS code method's security, but I had no other way to ensure that losing my phone wouldn't leave me with no way to get into my accounts. (If I lose my phone I can still resurrect my phone # on another device by SIM replacement).
The U2F works fine for corporate, etc. where you have a support team who can help you in case you lose it or forget anything. They can make you come in person and prove that you are you.
The problem with implementing this for personal is that if you ever lose the key or code generator, you are absolutely fucked because there is no way to prove who you are to Google and have them reset your password / security.
- dmoy 8y agoWhat I personally do is the backup codes stored in a bank vault.
- modeless 8y agoYou don't need multiple authenticators. The right thing to do is print multiple copies of your one-time emergency backup codes (https://support.google.com/accounts/answer/1187538 https://support.google.com/accounts/answer/1187538) and put them in many places. Wallet, car, house, parents' house, etc. You only have to do this once. The codes are useless without your password and you can revoke them at any time if you really need to, so spread them widely and then you won't ever have to worry about losing your authenticator.