3 ms·
The primary MFA device should be a Yubikey or something similar. Some of such keys are designed to be permanently plugged in. People use phones instead when the
by Kharacternyk 3y ago
The primary MFA device should be a Yubikey or something similar. Some of such keys are designed to be permanently plugged in. People use phones instead when they don't want to invest into a key or as a backup. EDIT: Or when OTP over SMS is the only MFA method supported as it likely is in your case.
- alpaca128 3y agoDoes that also work if Google again randomly decides I have to use a specific one of multiple MFA choices? Recently it forced me to dig out my old phone I hadn't been using for months and boot it just to confirm a popup because it simply wouldn't let me select a different method. I don't know what would have happened if I'd lost the phone instead of just buying a new one after support ended. It didn't even let me enter my printed out backup codes, which kind of defeats the purpose. And most people aren't even using a free password manager, there's no chance they're going to buy and configure a Yubikey.