Re:Google Authenticator now supports Google Account synchron...
by elbigbad on Monday April 24, 2023 @04:17PM
(#35692592)
Yep, I’ve been using Authy for years because of this. Before that, I would have a second phone with GAuthenticator on it and when I scanned the QR code to set up a new account, I would do it with both phones simultaneously to make sure I had a backup. It always struck me as absolutely ridiculous.
[ Parent
| on HN ]
Re:Google Authenticator now supports Google Account synchron...
by dvzk on Monday April 24, 2023 @07:43PM
(#35694739)
Authy used to share its SDK TOTP codes with attackers via account recovery, and no backup password was needed. SMS hijacking led to authenticator takeover on Authy SDK-using sites like Coinbase. Which is partly why Authenticator and co. were originally designed to prohibit secret backup.