Ask HN: Is using just a TOTP based authenticatation safe or a privacy issue

Re:Ask HN: Is using just a TOTP based authenticatation safe ... by victor_e on Sunday April 03, 2022 @08:51PM (#30902326)

It transfers the dependency from something they know (password) to something they have access to (phone or email). That thing they have access to could be compromised which then means their account is compromised. That is a risk acceptance question you need to consider.

Also to consider: What happens if a user loses their phone? How do they get access to their account?

[ Parent | on HN ]

Re:Ask HN: Is using just a TOTP based authenticatation safe ... by aaaaaaaaata on Monday April 04, 2022 @12:30PM (#30908582)

Everyone thinks having multiple affordable devices, some of which get almost no use but still have very important roles, is a weird techy thing to have.

I strive to avoid the stereotypes, but I have been unable to go without that setup since highschool!

[ Parent | on HN ]