Re:"Pwned Passwords" V2 With Half a Billion Passwords
by markdown on Wednesday February 21, 2018 @11:39PM
(#16435193)
> You should never use only 2FA for something you don't want to be locked out of.
Tell that to... everyone.
> You need a 3rd authentication method to replace the 2nd when you lose it, such as backup codes, that as well as a 4th one to recover a lost password.
That's on Cloudflare. If they don't offer backup codes, what can an end user do about that?
Re:"Pwned Passwords" V2 With Half a Billion Passwords
by rfugger on Thursday February 22, 2018 @04:22AM
(#16436344)
Manually record the seed key when you set up 2FA (usually this is contained in a QR code). Keep it somewhere safe and offline. It can be used to recreate your 2FA setup.
Tell that to... everyone.
> You need a 3rd authentication method to replace the 2nd when you lose it, such as backup codes, that as well as a 4th one to recover a lost password.
That's on Cloudflare. If they don't offer backup codes, what can an end user do about that?