Hacker News new | ask | show | jobs
by bachmeier 644 days ago
> Also if you really really hate two-factor authentication, e.g. due to psychological change resistance

Nearly all resistance to 2FA is because of fear of losing access to the 2FA device. I believe it's a well-earned resistance, because they've done a terrible job of explaining that there are alternatives in that case, such as special codes that you can write down and put in a safe.

3 comments

GitHub prompts you to save backup codes when you set up 2FA, and every so often when you log in. I don't think that's a terrible job, it's pretty much the standard.

They also nudge you to set up multiple 2FA methods. I have the app, a passkey, etc.

I don't bother much with the special back-up codes (although I do store them just in case). I just make sure I have the TOTP plaintext shared secrets stored on multiple devices.
One of the reasons I use Microsoft Authenticator instead of others is it allows me to back up the configuration to the Microsoft cloud. I've already followed the restore process several times over the course of replacing phones and it works well.
Authy backups work as well, have been using half a decade now.
Problem with Authy is you can't export your seeds externally, which sets you up for failure if Authy decides to turn into the next Raivo.

There is an unofficial method by using devtools on the desktop app, but it's been EOL for months and it may soon stop working completely.