4 ms·
This is why passwords are still king for many of us. And that the very same reason people can't be trusted with passwords is the same as why they can't be expe
by tjoff 5y ago
This is why passwords are still king for many of us.
And that the very same reason people can't be trusted with passwords is the same as why they can't be expected to keep backups of their recovery codes.
Passwords suck. But so does every form of 2FA.
- eastbound 5y agoBesides, where do you store your 2FA backup codes? At home?? Where they could be stolen without your knowledge? Most people’s homes are less safe than their online life.
- danuker 5y agoMaybe a safe or cameras would be useful for when you're not home. I sometimes leave my laptop on with motion started: https://motion-project.github.io/ https://motion-project.github.io/
- pmoriarty 5y agoYou could store them encrypted with a passphrase that only you know, so even if they're stolen they would be useless without your passphrase.
- TedDoesntTalk 5y agoYou could also encode them in DNA nucleotides and use CRISPR to modify your own DNA with your GitHub codes. /s
- bcrosby95 5y agoI would be more concerned about fire or natural disaster. If your house catches on fire while you're asleep, there's decent odds both your phone and any printed codes are gone.
- joshvm 5y agoThe historic solution is in a safety deposit box at a bank. If you're talking about things like crypto cold wallets which might be extremely valuable, why risk leaving it at home? The cost for small items like documents tends to be reasonable. Good practice for things like ownership deeds and wills. I don't think the average home thief would know what to do with a printout of your 2FA recovery code especially if it's buried in other paperwork. The real risk is loss from negligence or natural disaster.
- faho 5y agoWith 2FA someone can break into your home, find your 2FA backup codes, defeat your password (e.g. by finding it in a leak) and they're in. If they are targeting you from your online life they need to first find out where you live and travel there. Without 2FA someone can defeat your password and they're in.