2 ms·
> you lose access to your email/bank/github/etc. accounts protected by 2FA I wonder if apps like Microsoft Authenticator are better for this. They sync 2fa cod
by WiggleGuy 4y ago
> you lose access to your email/bank/github/etc. accounts protected by 2FA
I wonder if apps like Microsoft Authenticator are better for this. They sync 2fa codes to your Microsoft account. Naturally, the question becomes "Doesn't that make Microsoft a single point of failure? If someone know's your Microsoft password, they can get into your Authenticator and all your other accounts basically don't have 2FA anymore"
From what I can tell it doesn't look like Microsoft has an answer to this, unless there's something obvious I'm missing. On the bright side, though, if you lose your phone, your 2FA codes aren't lost.
Choices, choices.
- trelane 4y ago> They sync 2fa codes to your Microsoft account. This seems like a large amount of trust to be placing in Microsoft, since anyone with access to your account would also have access to your shared secret for every site. I would wager that they also would have access to your communications medium and password stores as well, in most cases, since you'd likey have bought in to the wider ecosystem. Or do they encrypt it client side?
- WiggleGuy 4y agoRestoration of the 2fa codes onto a new device doesn't seem to require communication with the original device, so I don't think there's client-side encryption going on. The Authenticator also has password vaulting features, but I agree that would be a bad idea for both your 2fa codes and your passwords to be in the same place (even worse if you use Outlook!)