Tell HN: It is impossible to disable Google 2FA using backup codes

Re:Tell HN: It is impossible to disable Google 2FA using bac... by gravitronic on Thursday January 19, 2023 @12:05PM (#34442679)

Thanks for the followup. I'm also on desktop.

When I click the second link, I'm forced to reauthenticate. During that reauthentication my only option for 2-factor auth is... a valid 2FA code. Backup codes are not allowed.

I suspect since you originally logged in with a 2FA code (I'm guessing), your session is marked as "recently two factor verified", and when I logged in with a backup code, I was not marked the same level of "secure".

[ Parent | on HN ]

Re:Tell HN: It is impossible to disable Google 2FA using bac... by random2021 on Thursday January 19, 2023 @12:12PM (#34442771)

since you told me I am using a I tried without 2FA code but with backup-code

> When I click the second link, I'm forced to reauthenticate.

Here, I am being asked my password.

Then get that page.

[ Parent | on HN ]

Re:Tell HN: It is impossible to disable Google 2FA using bac... by codetrotter on Thursday January 19, 2023 @12:17PM (#34442835)

Probably the difference, like parent says, is that you recently used 2FA, from the same OP address etc etc, so even though you have signed in with backup code now Google still trust your sign in more than OP.

[ Parent | on HN ]