News for hackers. Stuff that matters.

A comment on Tell HN: It is impossible to disable Google 2FA using backup codes. Parent comment

Re:Tell HN: It is impossible to disable Google 2FA using bac... by lcnPylGDnU4H9OF on Thursday January 19, 2023 @12:32PM (#34443032)
There may be a plugin for it but the KeePass clients I've used don't support this by default. Generally, it would be best to look for the string (and keep both the string and the image secret!).
[ Parent | on HN ]
Re:Tell HN: It is impossible to disable Google 2FA using bac... by wingmanjd on Thursday January 19, 2023 @12:52PM (#34443280)
KeepassXC lets you store the TOTP seed value associated with an entry by right-clicking on that key and selecting "Setting up TOTP".

Also, other TOTP generators like Authy and Aegis let you backup your tokens to restore to another device.

[ Parent | on HN ]
Re:Tell HN: It is impossible to disable Google 2FA using bac... by pieter_mj on Thursday January 19, 2023 @01:35PM (#34443781)
Yes, but be careful which totp app you're using to store seed values/secret keys : some store them as plain text! Personally on android I'm using keepass2android and keepassium on ios to store both the QR image and the string value. It will also generate the OTP value at login. As you know, the keepass password file can be backed-up anywhere.

https://raw.githubusercontent.com/blues-lab/totp-app-analysi...

[ Parent | on HN ]