4 ms·

I have so many important accounts attached to my gmail so I created a bunch of backup codes and hide them in various places

• authed 5y ago
  Good idea, but I wish that there was an option to get backup codes without having to enable 2-step verification. https://support.google.com/accounts/answer/1187538?hl=en&co=GENIE.Platform%3DDesktop https://support.google.com/accounts/answer/1187538?hl=en&co=...
  • Alex3917 5y ago
    Backup codes are a way to bypass the 2nd step, so what works that even mean?
    • londons_explore 5y ago
      No - you need backup codes and something else, like a password, SMS OTP, or access to the recovery email address.
      • aj3 5y ago
        Well yeah. If the recovery process is weaker than regular authentication, that's what bad guys will use for account takeover. You don't want to lose Gmail because someone bruteforced your backup code?
        • authed 5y ago
          It would not be weaker then usual authentication... you would still need username and password. Not sure why companies nowadays rely on your tiny device to provide a second password. Both my passwords and 2FAs are on that device, what security does it add? And why do they need a password if they are going to require Timestamped-2FAs anyways?