4 ms·
My sister was divorced and had to split her phone off from the shared plan. Not wanting to bother her ex, she just changed her number and got a new phone. A wee
by twobitshifter 6y ago
My sister was divorced and had to split her phone off from the shared plan. Not wanting to bother her ex, she just changed her number and got a new phone. A week or so later she tried to sign into Amazon:
She knew the password but they wanted the 2 factor on her registered device. That device was traded in.
That’s ok, the backup plan was to send a code to your phone number on record… of course this fails as well.
It can get very aggravating when 2FA goes the wrong way and people don’t believe you are who you say you are. Assuming that users will always have the same device or the same phone number is an obvious mistake.
- CrendKing 6y agoAmazon is a pretty bad example because it does give you backup codes to override 2SV. But for most properly implemented sites, if your sister had the backup codes, that issue shouldn't happen.
- speedgoose 6y agoI doubt that most people keep the backup codes.