4 ms·
that does suck... they do provide backup codes... and they do present a page every few months for you to verify that... i would recommend a 2fa app such as Auth
by taf2 5y ago
that does suck... they do provide backup codes... and they do present a page every few months for you to verify that... i would recommend a 2fa app such as Authy maybe as a good way in the future to have a backup for your 2fa codes...
- throwawayboise 5y agoYep -- you must save the backup codes off line, off-device for any hope of recovery from loss or damage of that device. This is the weakness of the scheme. It relies on people doing something that most people are not good at doing. Thus there will probably be a way for the user to recover without the codes (sending in photo ID or whatever) and that will be the point of attack for anyone trying to maliciously take over the account.