3 ms·
Not op, but my usual process is: * when setting up 2FA, a website shows a QR code * I screenshot the QR code, and print it out on an A4 sheet, with an annotat
by cuu508 6y ago
Not op, but my usual process is:
* when setting up 2FA, a website shows a QR code
* I screenshot the QR code, and print it out on an A4 sheet, with an annotation of what service it is for
* I scan the QR code from the A4 sheet on two different phones.
* Back on the website, I continue 2FA setup process only after the A4 sheet is printed, and both phones show the same codes
* The A4 sheet goes in a folder for safe keeping
* One phone goes in my desk drawer for daily use
* The other phone goes in my "go" bag that I take with me on short trips etc.
Both phones are used exclusively for Google Authenticator:
* they have no extra apps
* they have a screen lock
* they are always in flight mode
Started doing this when I got burned by having to extract GA's sqlite file from mostly-dead Nexus One over adb.
- waldfee 6y agosince the qr code is just the totp seed, i simply print the seed in huge font on a sheet of paper. chance of enough degredation to inlegibility is pretty slim if stored correctly
- Chris2048 6y agointeresting idea. I wonder what the minimum you need for a 2FA-only device would be.
- cuu508 6y agoI'm just using my old phones that still have a working touchscreen and camera.
- thinkmassive 6y agoThe Passport by Foundation Devices is a device that's pretty close to this, it just happens to do more than only 2FA: https://foundationdevices.com/ https://foundationdevices.com/