3 ms·

On the other hand, I locked my phone in a rental car and it took a week for them to mail it back to me. I was surprised, but I found that it made very little di

On the other hand, I locked my phone in a rental car and it took a week for them to mail it back to me. I was surprised, but I found that it made very little difference. I did not feel like I had any more time than usual. The only real impact was that I was locked out of anything that required two-factor authentication.

rmbyrro 2y ago
losing 2fa gives me anxiety. google auth is sync'ing now. it's a terrible idea from a security standpoint, though, which gives me even more anxiety... i guess i can't avoid security-related anxieties
- sebmellen 2y ago
  Use an open source TOTP manager and sync your codes using something like Standard Notes, not your regular password manager. This gives nice redundancy and two layers of security while staying synced.
  - bearjaws 2y ago
    Ente Auth + $100 old android phone for backing up to. Old phone stays in a safe, and only pull it out to add new TOTP codes.
    - zwarag 2y ago
      Why is this getting downvoted?
- teaearlgraycold 2y ago
  1password fixes this
- FollowingTheDao 2y ago
  I am with you on this, which I why I now use as many services I can that do not use it. Starting with my email.
- red369 2y ago
  Me too, but it might help to find become clear on which of the accounts you have 2FA turned on for could be reset by having them send an email, and which you would be locked out of. The email providers I use all require 2FA, but as long as I had paper backups of recovery codes for those I could probably use those to get back into most other accounts. No comment on whether I do have aforementioned paper backups, or whether I'm just relying on having a couple of devices with access to the codes, and then hopes, prayers and obsolete e-waste in drawers... Of course, travelling makes the puzzle even harder, and that's when it's often even more important to not get locked out of accounts. I had intended to offer a suggestion to worry less, but instead I'm going to go away and think about this more myself.
huijzer 2y ago
Get a few YubiKeys (or similar) and also link them. You only need one of the 2FA and can link multiple.
- als0 2y ago
  It's unfortunate that some sites only accept one Yubikey and not multiple.
  - OJFord 2y ago
    Even AWS. (Per IAM user.)

rmbyrro 2y ago

losing 2fa gives me anxiety. google auth is sync'ing now. it's a terrible idea from a security standpoint, though, which gives me even more anxiety... i guess i can't avoid security-related anxieties

sebmellen 2y ago
Use an open source TOTP manager and sync your codes using something like Standard Notes, not your regular password manager. This gives nice redundancy and two layers of security while staying synced.
- bearjaws 2y ago
  Ente Auth + $100 old android phone for backing up to. Old phone stays in a safe, and only pull it out to add new TOTP codes.
  - zwarag 2y ago
    Why is this getting downvoted?
teaearlgraycold 2y ago
1password fixes this
FollowingTheDao 2y ago
I am with you on this, which I why I now use as many services I can that do not use it. Starting with my email.
red369 2y ago
Me too, but it might help to find become clear on which of the accounts you have 2FA turned on for could be reset by having them send an email, and which you would be locked out of. The email providers I use all require 2FA, but as long as I had paper backups of recovery codes for those I could probably use those to get back into most other accounts. No comment on whether I do have aforementioned paper backups, or whether I'm just relying on having a couple of devices with access to the codes, and then hopes, prayers and obsolete e-waste in drawers... Of course, travelling makes the puzzle even harder, and that's when it's often even more important to not get locked out of accounts. I had intended to offer a suggestion to worry less, but instead I'm going to go away and think about this more myself.

huijzer 2y ago

Get a few YubiKeys (or similar) and also link them. You only need one of the 2FA and can link multiple.

als0 2y ago
It's unfortunate that some sites only accept one Yubikey and not multiple.
- OJFord 2y ago
  Even AWS. (Per IAM user.)