5 ms·

> how do you recover? * By using the TOTP recovery codes (you did write them down, right ?) * By using a TOTP client on another device (the client I use syncs

by Aaargh20318 8y ago

> how do you recover? * By using the TOTP recovery codes (you did write them down, right ?) * By using a TOTP client on another device (the client I use syncs it's (encrypted) database with all my iDevices) * By restoring from a backup of your phone (you do have a backup, right ?)

derwiki 8y ago
Even if I do this, and most people reading this do this, I suspect there’s still a large number of people who don’t know they should be doing this (like older relatives).
- TuringNYC 8y ago
  I suspect the parent comment was being half sarcastic because almost no one actually does this (though those are the exact ways to solve the problem.)
brazzledazzle 8y ago
The iCloud backup of my phone when restored to another phone didn’t bring over any of my authenticators. I don’t know if a physical backup would or not but it’s worth noting.
- 3pt14159 8y ago
  Yeah, if I hadn't been paranoid I would have lost $40k this way. Thankfully I'd kept my previous phone.
- drb91 8y ago
  Well, if that were not the case, your apple id would be the second factor to everything.
  - brazzledazzle 8y ago
    You're right. I'm not criticizing, just noting it for anyone that might think the online backup would be sufficient after reading the comment I replied to.
- Aaargh20318 8y ago
  They are tied to the phone, at least for Google Authenticator, if you do an iCloud backup. This is a security flag the app has set on the database file. If you do a local, encrypted backup the codes can be restored. Alternatively you can use a client like Authy that also allows you to sync them with your other devices (encrypted ofcourse).
paulie_a 8y ago
And what happens when those backup codes don't work? You are now locked out of an account with 3000 dollars, and have to literally send a photo with your ID, and a note saying you need it reset. Google authenticaor should never be used for anything that matters.

derwiki 8y ago

Even if I do this, and most people reading this do this, I suspect there’s still a large number of people who don’t know they should be doing this (like older relatives).

TuringNYC 8y ago
I suspect the parent comment was being half sarcastic because almost no one actually does this (though those are the exact ways to solve the problem.)

brazzledazzle 8y ago

The iCloud backup of my phone when restored to another phone didn’t bring over any of my authenticators. I don’t know if a physical backup would or not but it’s worth noting.

3pt14159 8y ago
Yeah, if I hadn't been paranoid I would have lost $40k this way. Thankfully I'd kept my previous phone.
drb91 8y ago
Well, if that were not the case, your apple id would be the second factor to everything.
- brazzledazzle 8y ago
  You're right. I'm not criticizing, just noting it for anyone that might think the online backup would be sufficient after reading the comment I replied to.
Aaargh20318 8y ago
They are tied to the phone, at least for Google Authenticator, if you do an iCloud backup. This is a security flag the app has set on the database file. If you do a local, encrypted backup the codes can be restored. Alternatively you can use a client like Authy that also allows you to sync them with your other devices (encrypted ofcourse).

paulie_a 8y ago

And what happens when those backup codes don't work? You are now locked out of an account with 3000 dollars, and have to literally send a photo with your ID, and a note saying you need it reset. Google authenticaor should never be used for anything that matters.