4 ms·
Same problem I had. I got a bunch of keys, and everything I actually want to U2F does not support it. Sure - Google, Github, Fastmail. But nothing financial. N
by zorked 8y ago
Same problem I had. I got a bunch of keys, and everything I actually want to U2F does not support it.
Sure - Google, Github, Fastmail. But nothing financial. Not even the more startupy stuff like TransferWise and Revolut. Fastmail forced me to enable SMS 2FA to use U2F, which I suspect is actually worse than not using 2FA.
Also, a inherent problem: I would really like to keep a backup key in a galaxy far, far away in case my house catches fire, but I cannot enable a key if I do not have it at hand.
- StavrosK 8y agoYou can disable SMS on Fastmail after you enable 2FA. I had asked their support, and IIRC the trick is to hold down CTRL when you're on the settings page, which will enable the "Disable SMS" option. This was years ago, so YMMV.
- devocracy 8y agoThat's the craziest thing ive ever heard, Easter egg to disable bad security options. What is this a video game?
- StavrosK 8y agoYou wouldn't be surprised if you saw the amount of people that said "hey can you remove my 2FA? I kept my codes on my phone and it broke". It's a real UX issue, the average person just can't back up their TOTP codes at all. Hell, I have a Yubikey as a backup and enroll the TOTP code to both places, and to the Yubikey as U2F.
- zorked 8y agoFWIW I now checked and I could remove SMS without tricks. It definitely forced me to set that up first.
- StavrosK 8y agoAh, good. It does force you to set up SMS, but, when I tried, I had to contact support to disable it without disabling 2FA completely.