Still locked out of my AWS account

Re:Still locked out of my AWS account by aianus on Friday July 07, 2017 @12:22PM (#14719631)

This anecdote makes me very happy with AWS. I want loss of 2FA to completely revoke access to my account. Otherwise any smart hacker can social engineer Amazon support with some fake drivers license photo and steal all my BTC (for example).

[ Parent | on HN ]

Re:Still locked out of my AWS account by calcifer on Friday July 07, 2017 @01:46PM (#14720416)

So what is your plan in case your phone gets lost/stolen/whatever and you lose access to your TOTP app?

[ Parent | on HN ]

Re:Still locked out of my AWS account by Corrado on Saturday July 08, 2017 @03:20AM (#14724525)

I use Authy as my TOTP client. It has a encrypted backup feature and allows me to share tokens between my devices (computer, phone, iPad, etc.) It's saved me on more than one occasion. :)

[ Parent | on HN ]

Re:Still locked out of my AWS account by Ajedi32 on Friday July 07, 2017 @04:21PM (#14721733)

Use the backup codes they provided you with when you set up 2FA. Or does Amazon not have those? (If not that seems really strange, every other service I've set up 2FA on has that recovery method.)

[ Parent | on HN ]

Re:Still locked out of my AWS account by mirekrusin on Friday July 07, 2017 @04:53PM (#14721991)

They don't provide backup codes.

[ Parent | on HN ]

Re:Still locked out of my AWS account by aianus on Friday July 07, 2017 @06:49PM (#14722830)

I have encrypted backups of all my 2FA secrets in two locations. I change phones every year and have never lost an account.

[ Parent | on HN ]

Re:Still locked out of my AWS account by Sohcahtoa82 on Friday July 07, 2017 @02:28PM (#14720797)

Yeah, that sounds good and all, but what happens if you lose your 2FA then?

[ Parent | on HN ]