There is no such problem. It's not even the emergency codes. Those are just a silly misdirection all sites engage in. When you set up 2fa, you just save the se

There is no such problem. It's not even the emergency codes. Those are just a silly misdirection all sites engage in. When you set up 2fa, you just save the seed value exactly the same way you save any other good random password you rely on a password manager to keep for you. It is exactly as difficult and exactly as easy and exactly as portable as the regular password. They just don't tell you that the number in the qr code is something you can keep and re-use exactly like the password. They lead you to throw that away and give you the stupid emergency codes instead. But just, don't throw it away that's all. It's the keys to your own kingdom. If you throw it away, yes, you can lock yourself out. One way you could solve that is by not having any keys, or another way is by just not throwing away your keys. You were never limited to any single magic device that better never break or get lost. You can have N different devices all generating the same valid current totp codes at the same time. You can set up a brand new device any time you want, if you just have any form of access to any copy of your password db. Flagging this was correct. What is wrong with 2fa is the way all the apps and sites don't tell users what the seed value is and don't tell them to keep it and thereby put the users into a risky position they never had to be in. It's criminal if you ask me, like a doctor or lawyer giving bad advice.