4 ms·
When you enable 2FA you are on pretty much every service asked to download recovery-codes, and save them somewhere safe. Did you do that, and if not, why not?
by josteink 4y ago
When you enable 2FA you are on pretty much every service asked to download recovery-codes, and save them somewhere safe. Did you do that, and if not, why not?
Also: Didn't you backup the 2FA codes somewhere else where you can "sync" them in?
I use Bitwarden Authenticator for 2FA (part of Bitwarden Pro) and it syncs my 2FA codes to all devices where I log on to Bitwarden. That way I avoid a single point of failure. Consider that the next time around :)
As a meta-comment on this thread itself... That even people here on HN can enable and make use of 2FA incorrectly is the reason it will never be a viable way to protect accounts for "everyone and their grandmother".
It's too complex, and we need something better.
- bluGill 4y agoWhere do you download those codes that is safe and secure? Everything I can think of, I can also think of a counter that means that mode is likely to fail. I'm a professional in the computer industry, so i'm more aware of possible failure modes than most people, but I also am aware of safe storage modes that most people don't have. The recovery codes as implemented are not useful backups for most people. Telling people to use them is the wrong answer. Sadly I know the above, but I don't have a better solution. It is a hard problem.
- ahofmann 4y agoI have the backup codes of my most important account (email) printed and in my wallet. Without a hint to which account they belong. This helped me multiple times, where my phone was not available. I would recommend this to everyone, who uses 2fa.
- vulcan01 4y agoDownload, print, and store them in a safe or safe deposit box. It's not like people lose their phone often.
- phphphphp 4y agoSecurity is layered. A backup code is only useful with the password, and your password is only useful with a second factor. You can be fairly liberal with storing your backup codes: make a couple of copies, keep them in secure places (one at home, one in your office). I agree that backup codes aren’t perfect but they’re pretty robust.
- jononomo 4y agoI have backup codes saved in 1Password for maybe 10% of the online accounts with which I use 2FA + Google Authenticator. I'm concerned about the online accounts for which I don't have backup codes.