News for hackers. Stuff that matters.
Re:Tell HN: It is impossible to disable Google 2FA using bac... by masukomi on Thursday January 19, 2023 @02:10PM (#34444272)
i feel like I'm asking a dumb question but why not just use a password manager that syncs your stuff and handles 2FA like 1Password? Break the phone? no worries you've got the info on your desktop. House goes up in a fire, no worries, they've got it on the cloud and you can access from a friend's house / library / whatever.
Re:Tell HN: It is impossible to disable Google 2FA using bac... by tempestn on Thursday January 19, 2023 @02:35PM (#34444565)
You can't actually access your 1pw vault from wherever if you don't have an existing authenticated device or a copy of your secret key. That's intended to provide added security in case your master password is compromised. So to guard against the house burning down situation you need to either keep a printout of the secret key somewhere else (friend's house, bank box, etc.) or save it somewhere (secure) online where you can get it without using 1pw.