4 ms·
Yeah, I lost my phone for the first time last year, and was very very glad for this default, because I was able to remove 2FA on my now lost phone from my compu
by cavanasm 6y ago
Yeah, I lost my phone for the first time last year, and was very very glad for this default, because I was able to remove 2FA on my now lost phone from my computer that remained logged into google services, and log into google on the replacement phone, and reset 2FA to that new device.
- SketchySeaBeast 6y agoMy paranoia about my devices stability and its 2FA software (LG G4 bootloop victim) means that I keep two phones with 2FA verification and applications enabled - one stays safe at all times so that in case I lose or drop my new one I can use the backup.
- Klathmon 6y agoMost services that use standard TOTP codes have backup codes that you can print out and store in a safe, and the ones that don't you can save the QR code that enrolls the 2FA app and use it again to re-enroll a new device if needed. Obviously the backup codes are preferred as you're not storing a master key to all future codes, but it's a lot easier to manage than a second device (at least for me).
- jacobsenscott 6y agoI've lost my phone and been able to re-connect to every 2FA service I use without any need for human interaction. For google I was saved because my laptop was still logged in and I could turn google's 2fa off. Basically everyone else has an "I lost my device" thing and a fallback to SMS codes or email links. This certainly weakens 2FA in general, but strict 2FA is unusable in practice.
- lordlimecat 6y agoJust store your 2fa totp key or qr code or backup somewhere that is either protected by 2fa (password manager, online storage) , or is available offline (file cabinet). Some online storage services have secure areas requiring 2fa to open which would be suitable.
- rabuse 6y agoI don't understand why these large companies don't incorporate some type of printable backup code that can be used if your 2FA device is lost/broken. I've incorporated this type of system multiple times in the past, and it works wonderfully.
- Nrbelex 6y agoIn fact, Google does: https://support.google.com/accounts/answer/1187538?co=GENIE.Platform%3DAndroid&hl=en https://support.google.com/accounts/answer/1187538?co=GENIE....
- saagarjha 6y agoYeah, pretty much every 2FA I have set up has done this.
- greenshackle2 6y agoEvery 2FA I have setup has this. Kudos to GitHub in particular for strongly insisting that you save the backup codes somewhere.
- bcrosby95 6y agoThey do. But now that I think about it, I don't remember where any of mine are, because I haven't had to use them in over 5 years.