3 ms·

So here's how I use 2FA apps: I have my primary phone with Authy and all the accounts. I also have a secondary (old) phone in my drawer, which also has Authy

So here's how I use 2FA apps: I have my primary phone with Authy and all the accounts. I also have a secondary (old) phone in my drawer, which also has Authy installed. Both of them automatically sync the 2FA accounts in my Authy account, which is linked to my email and phone number. In the event that my primary phone is not available, I can switch to my secondary phone quickly. Is that a good practice? I also plan to get physical keys and do the same when they become more popular.

Kalium 8y ago
Your heavy use of 2FA is a good practice. That said, linking SMS often allows for SMS to be used to reset passwords. As sim swapping and phone cloning become more common attacks, the level of protection you gain from having SMS available drops. These attacks essentially let someone else receive your texts or calls. I have at least one friend who has been attacked this way.