Discussion

Ask HN: What are the risks of 2FA?

For the longest time I've had a password system that worked for me. I knew all of it's risks and how to mitigate them.

Now, apps and websites force 2FA on me in the name of better security.

But I don't 100% understand these systems, and I feel like I can't be the only one.

Mostly, I'm scared of losing access to things that are important for my business.

Some random questions:

- if I use an authenticator app, like Google Authenticator, how does that even work? What happens if Google decides to close my account? How do I backup these apps?

- if I use SMS authentication, what happens if I lose my phone number? Ie through an error of the phone company, or myself.

- in general: are there any 2FA systems that are as clear and easy to understand as my old system (keepass + backups + long, always different passwords for every service)?

6 points janxgeist 5 years ago 5 comments

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton