5 ms·
I'm perpetually worried (and partially prepared) for this sort of scenario, as more of my accounts require 2FA. I dread the day I lose or break my phone, have m
by the__alchemist 1y ago
I'm perpetually worried (and partially prepared) for this sort of scenario, as more of my accounts require 2FA. I dread the day I lose or break my phone, have my items stolen, there's a weather disaster etc. I try to make my hobby repos public and/or backed up in multiple places as a hedge.
- IlikeKitties 1y agoJust do as I do and keep all the 2FA TOTP Codes in your keepass.
- manbash 1y agoDon't you have a 2FA Recovery Code?
- georgel 1y agoFar too many of the critical services (banks) still only offer SMS 2FA.
- the__alchemist 1y agoFor most of them. It's a tool, but not a silver bullet
- zdragnar 1y agoYubikey in a safe deposit box is about as good as we can get, at least for the services that allow it.
- aitchnyu 1y agoCan we use multiple Yubikeys for a service?
- Arrowmaster 1y agoThe problem with this tactic is the need to go get the Yubikey every time you make a new account.
- 1attice 1y agoActually, this is now a solved problem. Root-of-trust pattern. - Use Bitwarden or similar - Set BW to recognize the Yubikey as one (of several, incl. TOTP ('Authenticator') code) second factor. - On all other sites and services, generate passkeys (which are essentially virtual yubikeys) and save them in BW. - In BW, save the password and TOTP. BW itself, on another device (or in a separate incarnation - e.g. the desktop app when authenticating the browser extension) is now your everyday means of authenticating to BW. - BW-stored passkey is now your standard means of authentication for e.g. GitHub, Google, etc - Put the yubikey in a safety deposit box - Bravo, you have a very professional trust system
- ferngreen 1y agoApologies for asking you to repeat yourself. I'm not following this step. "In BW, save the password and TOTP. BW itself, on another device (or in a separate incarnation - e.g. the desktop app when authenticating the browser extension) is now your everyday means of authenticating to BW." Can you rephrase it and be specific which passwords and TOTP you mean?
- 1attice 1y agoSo Bitwarden can store _the password and TOTP for Bitwarden itself_. (!) I actually keep this in an entry entitled 'How meta!' because I'm cute and silly. So, let's say you're sitting down in front of a fresh install of Bitwarden. You can go to your phone in your pocket and get the password and TOTP and then set Bitwarden to not require a password for 30 days. Similarly, let's say you've installed the desktop app for Bitwarden but not yet the browser extension. You can look up the BW password and TOTP in the desktop app and use that to authenticate the browser extension. Or vice versa! T
- e40 1y ago
- bruckie 1y agoI've always wondered how people manage this in practice. Is seems great if you never sign up for anything new, but I end up creating one account per week or something. How do you keep the key in your safe deposit box current?
- deleted 1y ago[deleted]
- jopsen 1y agoPrint out 2FA codes and bury them somewhere. It's not that hard, and you feel like a proper spy doing it ;)
- vorpalhex 1y agoPlease don't depend on this. Paper does not like moisture and soil is full of it. Use an escrow or custodian (lawyer, bank, etc).
- DengistKhan 1y agolaminate?
- vorpalhex 1y agoIs your laminate rated to be in constant soil contact for however many years you need to hold onto a backup code for?
- thesmok 1y agoPaper inside a plastic bottle will be fine.
- vorpalhex 1y agoSoil is acidic, and soda bottles are meant to keep their seal for a two years, not a decade.
- commandersaki 1y agoAll my digital life is sorted with a password manager that sync's in a cloud (I know some consider this an anti-feature). I guess OP probably had to disclose information to someone (s)he trusts when going to prison and that trust was abused.