3 ms·
> What I do despise is that my Amazon.com credentials are the same as my Amazon AWS root account credentials. This bite me hard last year... I lost my phone an
by Galanwe 5y ago
> What I do despise is that my Amazon.com credentials are the same as my Amazon AWS root account credentials.
This bite me hard last year... I lost my phone and with it my MFA for the root account, and of course forgot to properly backup the MFA seed.
Now when calling AWS support to get back my accesses, they ask me to prove ownership of my Amazon.com account with the same email... Which is like 15 years old. I changed phone number, address, country dozens of times since then.
Apparently I would have to get back to my home country and ask a notary to sign a paper asserting I am really me to get back my accesses. Nightmare.
- danielheath 5y agoAs you have learned, setting up 2fa for an important service isn’t something to be done lightly. My current setup is two yubikeys (one in storage, one in my computer) and OTP on my phone. Failure is still possible but it’s unlikely enough for me.
- smt88 5y agoI'd love to do this, but many services still only support SMS or don't support multiple hardware keys.