Comment

Comment by nooyurrsdey

Good - 2FA is the responsibility of the user and resetting it kind of invalidates the security it helps bring.

I think the bigger issue is that people's 2fa codes are still tied to their phone. You can lose your phone at any moment, which is why i've always disliked apps like Google Authenticator which don't let you export 2fa keys (for good reason).

I personally use 1password, but there's definitely room for a cloud storage solution that safely holds 2fa credentials

parent nooyurrsdey 6 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton