4 ms·
> That's all fine and good but reliability of delivery of 2FA data is not exactly fantastic So don't use SMS. TOTP authenticators don't require any data to b
by CarelessExpert 5y ago
>
That's all fine and good but reliability of delivery of 2FA data is not exactly fantastic
So don't use SMS.
TOTP authenticators don't require any data to be transmitted at the time of authentication. They're set up with an initial shared secret (typically transmitted via QR code) at which point the codes are generated independently on the two devices.
This means the TOTP device doesn't even need to be connected to the internet. As long as you can get the TOTP seed onto the device (worst case: type it in), you can use that device for 2FA.
- livre 5y agoIt is not possible to use TOTP with Google without also giving them your phone number.
- tialaramex 5y agoNope. My work Google account didn't have my phone number but did have TOTP setup. I could set up TOTP on my personal account today, again without linking it to a phone number, but I don't because TOTP is less safe than my Security Keys which are already enrolled.
- livre 5y agoThat seems to have changed recently. I tried it a few months ago and wouldn't let me set it up without providing a phone number. Thanks for the heads up, I'll try again.