Ask HN: AWS registering MFA will be required in 29 days

Re:Ask HN: AWS registering MFA will be required in 29 days by mooreds on Friday October 11, 2024 @09:23AM (#41809273)

I'd go with number 2 unless you want to buy everyone a hardware token (option number 3).

There are open source solutions (I've used https://2fas.com/ ) and very common solutions (Google Authenticator).

You can even print out the QR code and put it in a secure location (safe, safe deposit box) as a break-glass in case everyone's phones cease functioning.

[ Parent | on HN ]

Re:Ask HN: AWS registering MFA will be required in 29 days by herodoturtle on Friday October 11, 2024 @10:25AM (#41809747)

We all have the gmail app installed on our phones - is this something we could tap into for Google Authenticator?

Forgive the ignorant questions, as you can tell we're pretty new to this stuff.

Kinda wish we could just use simple email 2FA to be honest!

Thanks for the reply.

[ Parent | on HN ]

Re:Ask HN: AWS registering MFA will be required in 29 days by dcminter on Friday October 11, 2024 @10:40AM (#41809880)

I use Google's Authenticator for this - you should be fine with that.

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credenti...

[ Parent | on HN ]

Re:Ask HN: AWS registering MFA will be required in 29 days by mooreds on Friday October 11, 2024 @02:40PM (#41812133)

No worries. Google Authenticator is entirely separate from gmail. I think you there was a sibling comment that linked to the AWS docs.

As far as I know, you don't even have to have a google account to use Google Authenticator in many use cases. (You do if you want to back up your secrets.)

[ Parent | on HN ]

Re:Ask HN: AWS registering MFA will be required in 29 days by herodoturtle on Saturday October 12, 2024 @01:35AM (#41816694)

Ok great thanks for clarifying all that ^_^

[ Parent | on HN ]