4 ms·
Or, allow it, and inform them there's a safer method called Google authenticator. Authenticators make your logins dependent upon 3rd party software, and is only
by devwastaken 8y ago
Or, allow it, and inform them there's a safer method called Google authenticator. Authenticators make your logins dependent upon 3rd party software, and is only as secure as how that single source of failure is.
- shittyadmin 8y agoThere's many 2FA apps compatible with the TOTP and HOTP standards and they rarely, if ever require an update. Absolutely minimal 3rd party involvement, I'd say less than most web browsers these days as there really isn't a significant attack surface for the apps.
- kaoD 8y agoIf you're truly paranoid, TOTP and HOTP are absurdly easy to implement if you've got an HMAC primitive: https://en.wikipedia.org/wiki/HMAC-based_One-time_Password_algorithm#HOTP_value https://en.wikipedia.org/wiki/HMAC-based_One-time_Password_a... https://en.wikipedia.org/wiki/Time-based_One-time_Password_algorithm#TOTP_value https://en.wikipedia.org/wiki/Time-based_One-time_Password_a... https://github.com/google/google-authenticator/wiki/Key-Uri-Format https://github.com/google/google-authenticator/wiki/Key-Uri-...
- VectorLock 8y agoIt always bugged me how Google Authenticator doesn't back up accounts "by design." I know its more secure, but damn its a major hassle if you use it for a lot of things and you need to get a new phone.
- somabc 8y agoAuthy is a very good substitute with backups.
- joewee 8y agoMany of these services, I believe google is one, still require mobile phone as a fallback option.
- seppin 8y agoPaypal, an actual bank, still only allows SMS 2fa. It's stupid.
- Avamander 8y agoWrong. TOTP is supported, although hidden.
- jdeibele 8y agohttps://www.paypal-community.com/t5/Tips-from-Moderators/PayPal-Security-Key/m-p/433633#U433633 https://www.paypal-community.com/t5/Tips-from-Moderators/Pay... It uses Verisign's VIP app instead of Google Authenticator (or Authy or whatever).
- Avamander 8y agoYou can use any TOTP app.
- npunt 8y agoAccording to some threads I've read it doesn't work in all circumstances. Personally I wouldn't risk it since it could mean risking getting locked out of your account.
- Avamander 8y agoI've been using it for a few years now and I haven't encountered a place where I couldn't use it. It might force you to enter the TOTP code at the end of your password though, but it works.
- seppin 8y ago