Ask HN: Gmail account security

Re:Ask HN: Gmail account security by rrrhys on Sunday January 23, 2022 @06:14PM (#30051622)

1. In a thread about being locked out of google services because of AI black box, it makes sense to reduce dependence anywhere possible

2. If you get a new device, you need to un-enrol and re-enrol in all 2fa providers with g authenticator - it's a nightmare. Very hard if the old device got fatally dropped in a pool! I know at least with Authy you can carry the tokens to a new device.

[ Parent | on HN ]

Re:Ask HN: Gmail account security by golem14 on Sunday January 23, 2022 @08:36PM (#30052655)

I just want to chip in and say that 2. can be helped somewhat by having a second device (maybe old smartphone on wifi) that you export all authenticator keys to. Stick the old phone in a safe and make sure it's still working every so often (2x/year?)

This is relatively new - a few years ago Authenticator did not support this.

Oh, and make sure before you use the emergency device, time is synced - codes won't work otherwise.

[ Parent | on HN ]

Re:Ask HN: Gmail account security by rrrhys on Sunday January 23, 2022 @10:53PM (#30053547)

> This is relatively new - a few years ago Authenticator did not support this.

Thanks, this was around when my device went for a swim.

[ Parent | on HN ]