News for hackers. Stuff that matters.

A comment on Ask HN: What is a secure way to allow 2FA resets?. Parent comment

Re:Ask HN: What is a secure way to allow 2FA resets? by rzzzt on Thursday December 27, 2018 @11:21AM (#18770392)
GitHub has 16 recovery keys which you can print in advance, and use if you don't have your authentication device at hand. They are also retrievable from the account's security page at any time.

https://help.github.com/articles/configuring-two-factor-auth...

[ Parent | on HN ]
Re:Ask HN: What is a secure way to allow 2FA resets? by lclarkmichalek on Thursday December 27, 2018 @11:28AM (#18770431)
They'll also reset it if you have the ssh private key for one of the public keys you've registered on the site
[ Parent | on HN ]
Re:Ask HN: What is a secure way to allow 2FA resets? by jiveturkey on Thursday December 27, 2018 @02:12PM (#18771707)
doesn’t work / N/A for the OP. recovery keys require the user to do something in advance of reset. his users won’t do that.
[ Parent | on HN ]