News for hackers. Stuff that matters.
Re:Ask HN: What are the risks of 2FA? by viraptor on Sunday June 13, 2021 @04:21AM (#27490815)
> if I use an authenticator app, like Google Authenticator, how does that even work?

The authenticator oath tokens are generated in a standard way, usually as TOTP (https://en.wikipedia.org/wiki/Time-based_One-Time_Password). You can use any authenticator and they'll work the same.

> What happens if Google decides to close my account? How do I backup these apps?

Your authenticator should not be bound to any account. Make sure your can export your data or setup a new one.

You can make a backup by saving the QR code you use initially, or the text code you're provided at the time.

In case of other issues, each service should give you some kind of emergency access. Usually emergency access codes you can save / print out.

There are no comments on this comment yet.