News for hackers. Stuff that matters.

A comment on Google introduces mandatory 2-Step Verification for Google Accounts. Parent comment

Re:Google introduces mandatory 2-Step Verification for Googl... by toast0 on Wednesday November 03, 2021 @10:57AM (#29095585)
As a tech savvy person, I used 2fa for all the corporate stuff I could and for some personal stuff too.

Now that I only have one phone, I've turned off 2FA as much as possible, because only one phone means when it breaks, I can't access my accounts, because I can't get to the 2FA tokens. No thanks.

[ Parent | on HN ]
Re:Google introduces mandatory 2-Step Verification for Googl... by sct202 on Wednesday November 03, 2021 @11:06AM (#29095717)
You can add the 2FA authenticator codes to multiple authenticator programs. I usually add them on to 2 different devices at the same time.
[ Parent | on HN ]
Re:Google introduces mandatory 2-Step Verification for Googl... by artificialLimbs on Wednesday November 03, 2021 @12:12PM (#29096661)
You didn't read any of those screens warning about you needing the backup codes? I do realize some services don't provide backup codes (which is insane), but when they don't I have found that they provide the codes you can manually type in to authenticator apps. With that, you can add the code in multiple places, like on your phone and also another computer with any totp app like authy or TOFU or whatever to have a 'backup'.

I keep my backup codes in a plain text files in a folder on my home NAS which is encrypted on disk, and backs up through rclone (with encryption) to backblaze every night. I'm about to configure up a second NAS for redundancy because 3 2 1.

[ Parent | on HN ]
Re:Google introduces mandatory 2-Step Verification for Googl... by toast0 on Wednesday November 03, 2021 @02:05PM (#29098278)
> You didn't read any of those screens warning about you needing the backup codes?

I read them, and said, no thanks; I'd rather be able to recover my accounts easily.

[ Parent | on HN ]
Re:Google introduces mandatory 2-Step Verification for Googl... by lotsofpulp on Wednesday November 03, 2021 @11:21AM (#29095933)
I use Keepass with Strongbox and save the database file in iCloud. That way I have TOTP codes backed up, and I can share with others such as my spouse.
[ Parent | on HN ]