3 ms·
My only other experience with 2FA flows other than SMS are the "Auth" apps that generate passkeys like authy or google authenticator. But more than once, I've u
by codexb 3y ago
My only other experience with 2FA flows other than SMS are the "Auth" apps that generate passkeys like authy or google authenticator. But more than once, I've updated my phone, or had to reset it, or switched phones, and been locked out of a service. In my experience, there's usually no automated flow to recover from those situations, and I've been forced to resort to opening a support ticket to reset my account password in a way that's usually far more insecure and could be hacked by simple social engineering, and it usually takes a few days to a few weeks to resolve.
- dingi 3y agoThis is the most annoying thing about 2FA apps. I once dropped my phone and broke it. It wasn't in a repairable state. Lost access to multiple accounts due to losing 2FA apps. Sometimes, I think security people make them unnecessarily complex just for the sake of it. Not all services need 2FA. And SMS is fine for most of the things.