3 ms·
IIUC the Authy "feature" where it allows you to transfer 2FA codes to a new device defeats the purpose of 2FA. That is, if someone gets access to your Authy acc
by gerash 7y ago
IIUC the Authy "feature" where it allows you to transfer 2FA codes to a new device defeats the purpose of 2FA. That is, if someone gets access to your Authy account they'll get access to your 2FA codes. This has been used to steal cryptocurrencies from users in the past:
https://www.newsbtc.com/2017/06/03/coinbase-recommends-users-enable-google-authenticator-ditch-authy/ https://www.newsbtc.com/2017/06/03/coinbase-recommends-users...
- AdmiralAsshat 7y agoTrue, but you can enable/disable the multi-device feature at any time. So you can theoretically just turn it long enough to port your codes over to the new device, confirm that they work, and then de-authorize the old advice from the account and turn the feature off. I ended up doing as much when I lost my Android tablet at a bookstore on which I had Authy installed. It gave me a mild panic attack at the time, but, a year later and none of my accounts have been hacked yet, so, I have to hope that the other security measures on the device were enough to thwart the potential thief/adversary.