5 ms·
IMO a good balance between never resetting 2FA and resetting 2FA with a simple call to tech support: The customer calls in to reset it, you then wait 24 hours,
by BenjiWiebe 8y ago
IMO a good balance between never resetting 2FA and resetting 2FA with a simple call to tech support: The customer calls in to reset it, you then wait 24 hours, and attempt to contact them through all known contacts for them at the end of 24hrs. If they then approve the reset OR you can't contact them (i.e. lost phone) THEN reset it. Sorry if I wasn't very clear.