16 ms·

Screenshot the QRCode, print it out, and keep it in a safe. I have an encrypted backup of all my TOTP QRCodes and this has been tremendously useful. I loathe

Screenshot the QRCode, print it out, and keep it in a safe. I have an encrypted backup of all my TOTP QRCodes and this has been tremendously useful. I loathe sites that only do SMS 2FA, and I assume by default they just want my cell # for marketing or other privacy invasive purposes. Too many sites using SMS 2FA have poisoned the well.

smichel17 6y ago
That's a good idea. I've been only enabling 2fa when I can use two forms of it (totp + u2f token), but that's still vulnerable since I often carry both of those on my person at the same time.