5 ms·

I don't know how DO's 2FA works, but when you signed up were you not given a number of backup codes for a contingency? I wish more vendors did this. Also I thi

I don't know how DO's 2FA works, but when you signed up were you not given a number of backup codes for a contingency? I wish more vendors did this. Also I think this isn't so much a caution about DO as it is poor implementations of 2FA without good customer service to back it up.

anuragsoni 5y ago
Digitalocean offers TOTP for 2fa, with backup codes! No email needed. If memory serves well they only offer a TOTP and SMS based 2fa so i'm not sure why an email would be sent for this. Edit: Their docs mention the 2fa modes that are supported: https://docs.digitalocean.com/products/accounts/security/2fa/ https://docs.digitalocean.com/products/accounts/security/2fa...
- MoSattler 5y ago
  I never really activated 2FA - the email verification code routine is something they do when one logs in from a new browser, or when one deleted cookies it seems. Unfortunately there are no backup codes for that.
  - meepmorp 5y ago
    I've never gotten an email like that from them, but I also have 2FA set up.
    - MoSattler 5y ago
      I guess once you have 2FA setup it's not necessary anymore. I just set up a new account for testing purposes, and I get their 6 digit code email out of the box.
bks 5y ago
https://docs.digitalocean.com/products/accounts/security/2fa/ https://docs.digitalocean.com/products/accounts/security/2fa... Looks like they provide backup options.