3 ms·
Screenshot all QR codes and store them in Dropbox, which also has 2-factor authentication. Store recovery code for Dropbox in Google Docs, which also has 2-fact
by maratd 13y ago
Screenshot all QR codes and store them in Dropbox, which also has 2-factor authentication. Store recovery code for Dropbox in Google Docs, which also has 2-factor authentication.
So for me to be totally screwed, I would have to lose my phone and have my logins expire on both Dropbox and Google.
Hasn't happened yet =)
- YuriNiyazov 13y agoActually, I disagree with you here (because what hasn't happened to you has actually happened to me). I was robbed at gunpoint, the perpetrator took both my phone and my laptop (the only computer authorized to login), which was the only computer that had a non-expired login. I print out all the codes, stored them in a secure place in my house (with things like my passport). For the truly paranoid, get a safe, or a safety deposit box at a bank.
- hashtree 13y agoNot to mention the much more likely attack vectors with this approach over a safe/deposit box based approach (which you might be alluding to): - This has a big assumption that 2FA cannot be bypassed AND other service exploits are not possible. The recent Dropbox security paper showed this was possible: https://www.usenix.org/system/files/conference/woot13/woot13-kholia.pdf - Device stolen/lost/hacked with active logins to said services OR local copies of said 2FA recovery codes? Eek! - Our friends at the NSA love that you use Dropbox to store this versus a more secure service like SpiderOak.
- deleted 13y ago[deleted]