News for hackers. Stuff that matters.

A comment on Flaw has Microsoft Authenticator overwriting MFA accounts, locking users out. Parent comment

Re:Flaw has Microsoft Authenticator overwriting MFA accounts... by gpvos on Sunday August 18, 2024 @05:36AM (#41281256)
I generate five random words and store them in the comment field of my password manager. It ensures they are at least pronounceable when asked over the phone.
[ Parent | on HN ]
Re:Flaw has Microsoft Authenticator overwriting MFA accounts... by thaumasiotes on Sunday August 18, 2024 @06:44AM (#41281525)
Have you tried providing five different random words and seeing whether the person on the other end will take them?
[ Parent | on HN ]
Re:Flaw has Microsoft Authenticator overwriting MFA accounts... by gpvos on Sunday August 18, 2024 @09:49AM (#41282370)
The chance to do so hasn't occurred yet. Might be interesting to try, but it doesn't happen often enough and my priorities tend to be different when it does.

I thought up this schema after the last and only time I needed to use a secret question over the phone, when I read 32 ASCII characters to an Apple employee (which didn't work, but then they enabled a skip button for me to use).

[ Parent | on HN ]