4 ms·
Google Authenticator is a huge question. While there is apparently a desktop interface, if someone gets access to my phone, they have the live access codes rig
by toss1 7y ago
Google Authenticator is a huge question.
While there is apparently a desktop interface, if someone gets access to my phone, they have the live access codes right there. When the SIM is stolen, can the authenticator also be accessed with the new location of that identity?
The process for moving Authenticator involves receiving a six digit Google code on your phone -- which was just effectively stolen with the SIM...
While Google may have built in protections, they are not obvious at this point to me, a casual user of Google Authenticor.
Does anyone have any more information to keep this more secure?
- r1ch 7y agoLast time I switched phones I had to set up GA from scratch, re-scanning the seeds on every account. The initial SMS code was just to attach an authenticator to a new device. Someone compromising your phone number shouldn't be able to get access to your codes, they would need the physical device. Also note that there is no official desktop client, anything that claims to be is 3rd party and wouldn't be connected to your current codes.
- noisy_boy 7y agoYou can generate backup codes and print/store them securely[0]. That is independent of your phone. [0]: https://myaccount.google.com/signinoptions/two-step-verification/enroll-welcome?pli=1 https://myaccount.google.com/signinoptions/two-step-verifica...