Re:UPI: India's Unified Payments Interface
by nine_k on Saturday August 08, 2020 @04:58PM
(#24095137)
2FA with some rescue codes printed and kept in your wallet / safe box seems like a reasonably bulletproof setup (hi GitHub!), but not every important site offers this.
[ Parent
| on HN ]
Re:UPI: India's Unified Payments Interface
by jgalt212 on Saturday August 08, 2020 @07:58PM
(#24096219)
Yes, that's decent. I also like services that allow you register multiple 2FA devices for an account. e.g. my back up phone not only serves as my back up phone, but also my back up 2FA device. I believe rackspace allows this.
Re:UPI: India's Unified Payments Interface
by scoot on Saturday August 08, 2020 @05:57PM
(#24095570)
Printing them and carrying them in a wallet that could be lost or stolen seems like asking for trouble.
Unless you're a victim of a targeted attack, and the perpetrators know your accounts and go to immediately hijack them, it's a non-issue. You just generate and print new rescue codes, and the old codes become invalid.