News for hackers. Stuff that matters.
Re:Google is 'gradually rolling out' option to change your g... by cuu508 on Friday December 26, 2025 @02:09AM (#46389920)
So don't put it off until it is too late -- if you haven't already, regenerate and copy TOTP seeds to paper now.

When you set up TOTP on a new account, copy the TOTP seed to paper then and there, resist the "I'll do this later".

Re:Google is 'gradually rolling out' option to change your g... by fc417fc802 on Friday December 26, 2025 @04:45AM (#46390681)
If it isn't backed up it doesn't exist.

Corollary (likely unpopular I'd hazard) - hardware token implementations that I can't back up to paper don't exist as far as I'm concerned.

Re:Google is 'gradually rolling out' option to change your g... by cuu508 on Friday December 26, 2025 @05:43AM (#46390944)
My policy is to enroll multiple WebAuthn keys and treat the second, third etc. key as the backup.
Re:Google is 'gradually rolling out' option to change your g... by DetectDefect on Friday December 26, 2025 @10:15AM (#46392851)
I stopped using webauthn for this reason, plus the fact requires a ton of intrusive browser features and access. This surely will enrage most readers, which itself reveals an interesting conditioning that has taken place.