3 ms·
But if you lose your 2FA device then you lose access to everything if there is no alternative recovery mechanism. I recently started working with a client that
by Silhouette 5y ago
But if you lose your 2FA device then you lose access to everything if there is no alternative recovery mechanism.
I recently started working with a client that uses cloud-hosted everything and mandates 2FA for all accounts. They asked me to install Google's authenticator app for that purpose. So far, so reasonable.
However of those different services, only one provides recovery codes as a standard part of its 2FA registration process. For everything else, if my work phone gets stolen or broken, that's it, game over for those accounts. I would need to contact the administrator for each service on my client's team and get them to restore access somehow.
- blfr 5y agoAnother scenario where yubikeys shine: you can have multiple. Keep one in your main computer, one on you, and one at your parents's place, or even a safety deposit box if you're feeling fancy.
- Silhouette 5y agoDefinitely an advantage. Of course like any other back-up it's only worth anything if you test each copy regularly!
- Groxx 5y agotbh I think that's basically reasonable for corporate-controlled accounts. They can verify that you are you, and recover the account (or get you a new equivalent one) pretty much no matter what you screw up. It might take a couple days, but it'll happen eventually. Individuals do not have that kind of power over their own accounts. So if you screw up, you're screwed for good. 2FA means third parties can screw me over at any time, I see no reason to take that increased risk.