News for hackers. Stuff that matters.
Re:Don't use passkeys for encrypting user data by NekkoDroid on Saturday February 28, 2026 @06:22AM (#47193813)
> Genuine question: what if the recovery asks for a 2nd factor that's e.g. the device which you lost? Is that common?

Instagram does something similar. If you have no logged in device and you reset your password, good luck getting in, cuz it wants you to log in a device "it recognizes" else it won't let you log in.

Re:Don't use passkeys for encrypting user data by gzread on Sunday March 01, 2026 @05:32AM (#47205487)
Google does it too. You log in with your password and it says "please press the number 35 on your phone"