4 ms·
Does anyone knows how the hackers were able to generate auth codes without User's backup password to decrypt the stored keys?
by scottydelta 4y ago
Does anyone knows how the hackers were able to generate auth codes without User's backup password to decrypt the stored keys?
- guiambros 4y agoIsn't the encryption password optional?
- scottydelta 4y agoThis must be the case. The whole point of 2-step auth in this case is something you have(authy storage) and something you know(your authy backup password).
- eurasiantiger 4y agoThe backup password prompt is just a reminder. You can just cancel it to access your keys.
- scottydelta 4y agoIt is not optional if you have a backup password set. Once you log into your account using your phone number, you still need to enter your backup password once to decrypt and actually start generating codes. The reminder you are talking about is when you are already using Authy to re-enter your backup password so that you dont forget it. That is the prompt you can dismiss, not the once needed to setup Authy on new machine.