Re:I've locked myself out of my digital life
by jimmydorry on Wednesday June 08, 2022 @04:02AM
(#31664575)
https://authy.com/blog/understanding-2fa-the-authy-app-and-s...
The fact that they disable SMS authentication for accounts that they deem "high profile" says it all.
Last time I looked, I don't recall there being a backup password (essentially a local encryption). If you SIM swap someone, you'll pull down their OTP seeds, but won't be able to read them without that code... so that's a slight improvement at least.
BUT! They have a recovery process. So the risk profile is convincing the telco to SIM swap + lodging a support ticket with authy (that takes 24 hours to complete).
>Can I reset my Backup Password?
> Yes, it is possible to reset your Backup Password by tapping on Change Password in the Backup Password area of the Settings menu within the Authy app. You will have to ensure all 2FA account tokens are decrypted on your device (No red lock icons). Once a user resets their Backup Password on a device, all other devices with the Authy app for this user’s Authy account will require entering this new Backup Password.
https://support.authy.com/hc/en-us/articles/360036077534-Aut...