Bitcoin Forum
May 27, 2024, 11:43:05 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: WARNING: Be careful with your 2FA!  (Read 195 times)
CryptAssist (OP)
Jr. Member
*
Offline Offline

Activity: 364
Merit: 4


View Profile
June 20, 2018, 09:52:52 AM
 #1

If you have any brains as a crypto holder you either store your crypto on in a hardware wallet or you use 2 factor authentication, (2fa). If you don't, you are crazy. HOWEVER. Once you do, you run a greater risk of losing all of your holdings than a hacker getting them. As a beginner using any 2FA, you NEED to understand the value of the initial code that is given to you as a backup code for any new account that you add. Each one has a backup code associated with it. It will only be shown once and you will never see it again. You need to write it down and put it in a safe place OTHER than your phone and be careful keeping it on your PC. If you lose your phone or if it gets broken and you don't have the backup code, it's gone and you are locked out. So if you don't have it, login to whatever wallet or account it is and remove it and immediately add a new one and save that initial code. I just saved you some crypto believe me! 
OmegaStarScream
Staff
Legendary
*
Offline Offline

Activity: 3486
Merit: 6150



View Profile
June 20, 2018, 12:45:19 PM
 #2

Or don't even use online services. A two-factor authentication may protect you from hackers specifically targeting your account but If the target is the exchange hot wallet, the servers or If its an inside job, It won't be much useful.

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
rat03gopoh
Hero Member
*****
Offline Offline

Activity: 2086
Merit: 641


Your keys your responsibility


View Profile WWW
June 20, 2018, 02:34:16 PM
 #3

The 2FA service is created to minimize hacking or other losses caused by the system. And otherwise if the user performs carelessness or unintentionally the user who makes them lose the asset is out of control of the system. It's stupid, if someone keeps a security code or authentication in only one device.
And I think they do not really lose in this case, just can not access their assets except doing things that can make their wallets open again

▓██   ██▓ ▒█████   █    ██  ██▀███      ██ ▄█▀▓█████▓██   ██▓  ██████   
 ▒██  ██▒▒██▒  ██▒ ██  ▓██▒▓██ ▒ ██▒    ██▄█▒ ▓█   ▀ ▒██  ██▒▒██    ▒   
  ▒██ ██░▒██░  ██▒▓██  ▒██░▓██ ░▄█ ▒   ▓███▄░ ▒███    ▒██ ██░░ ▓██▄     
  ░ ▐██▓░▒██   ██░▓▓█  ░██░▒██▀▀█▄     ▓██ █▄ ▒▓█  ▄  ░ ▐██▓░  ▒   ██▒ 
  ░ ██▒▓░░ ████▓▒░▒▒█████▓ ░██▓ ▒██▒   ▒██▒ █▄░▒████▒ ░ ██▒▓░▒██████▒▒ 
   ██▒▒▒ ░ ▒░▒░▒░ ░▒▓▒ ▒ ▒ ░ ▒▓ ░▒▓░   ▒ ▒▒ ▓▒░░ ▒░ ░  ██▒▒▒ ▒ ▒▓▒ ▒ ░ 
 ▓██ ░▒░   ░ ▒ ▒░ ░░▒░ ░ ░   ░▒ ░ ▒░   ░ ░▒ ▒░ ░ ░  ░▓██ ░▒░ ░ ░▒  ░ ░ 
 ▒ ▒ ░░  ░ ░ ░ ▒   ░░░ ░ ░   ░░   ░    ░ ░░ ░    ░   ▒ ▒ ░░  ░  ░  ░   
 ░ ░         ░ ░     ░        ░        ░  ░      ░  ░░ ░           ░   
 ░ ░                                                 ░ ░                 
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀▄▄██▀▀⠀▄▄▄⠀⠀▀▀█▄▄▄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀▄█▀▀⠀⠀⠀⠀⠀███⠀⠀⠀⠀⠀⠀⠀▐▀█▄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀▀⠀⠀⠀⠀⠀⠀⠀⠀▐████████████⠀⠀█⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀▄▄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀██████████████▄⠀⠀⠀⠀⠀⠀⠀⠀⠀▄⠀▄⠀⠀⠀⠀⠀
⠀⠀██▀⠀⠀⠀⠀⠀⠀▄▄▄⠀⠀⠀⠀⠀⠀▀█████████████⠀⠀⠀⠀⠀⠀⠀▐██████▄▄⠀⠀⠀
⠀⠀▐⠀⠀⠀⠀⠀⠀⠀⠀█▄██▄⠀⠀⠀⠀⠀⠀▀███████████⠀▄⠀⠀⠀⠀⠀⠀██⠀⠀⠀██▌⠀⠀
⠀⠀⠀⠀⠀⠀▄⠀⠀⠀⠀███▄▄▌⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀▀█▀⠀⠀█▌⠀⠀⠀⠀██▀▀██▀⠀⠀⠀
⠀⠀⠀⠀⠀█▌⠀⠀⠀▐▀███▀▄█▄▄▄▄▄▄▄▄▄▄⠀⠀⠀⠀⠀⠀▀█▌⠀⠀⠀⠀▄██▌⠀⠀▄██⠀⠀⠀
⠀⠀⠀⠀⠀█▌⠀⠀⠀⠀███⠀⠀██▀██▀██▀██▀████▄⠀⠀██⠀⠀⠀⠀⠀⠀█▀▀█▀▀▀⠀⠀⠀
⠀⠀⠀⠀▐██⠀⠀⠀⠀█▀⠀⠀⠀⠀▀⠀▀▀⠀▀▀⠀▀█⠀█▀█▀██⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀█▌⠀⠀⠀⠀`⠀⠀▄⠀▐██████▄▄⠀⠀▀▐▀██▀██⠀⠀⠀⠀⠀⠀⠀▄██▀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀▀█⠀⠀⠀⠀⠀⠀██⠀█⠀⠀▀██████▄▄⠀⠀█▀⠀▀⠀⠀⠀⠀⠀⠀███▀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀▄⠀⠀██⠀▄⠀⠀⠀`▀███⠀█⠀▀▀██████▄⠀⠀⠀██⠀⠀⠀▄███⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀█⠀⠀⠀▀⠀⠀▀▀▄▄⠀⠀▀████▀▄⠀▀██████▄▄▄█▄█████⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀▀▌⠀⠀⠀⠀⠀⠀⠀⠀▀▌⠀⠀⠀▐███▄█⠀▄⠀▀▀█████████▀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀█⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀█⠀⠀⠀⠀⠀██████▄▀⠀⠀▀▀▀▀▀⠀⠀▄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀▄⠀⠀⠀⠀⠀▌▀▀⠀⠀▄⠀⠀⠀⠀⠀⠀⠀▀█⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀▀▀███▀▀⠀⠀▐█⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
▓██   ██▓ ▒█████   █    ██  ██▀███      ██▀███  ▓█████   ██████  ██▓███   ▒█████   ███▄    █   ██████  ██▓ ▄▄▄▄    ██▓ ██▓     ██▓▄▄▄█████▓▓██   ██▓
 ▒██  ██▒▒██▒  ██▒ ██  ▓██▒▓██ ▒ ██▒   ▓██ ▒ ██▒▓█   ▀ ▒██    ▒ ▓██░  ██▒▒██▒  ██▒ ██ ▀█   █ ▒██    ▒ ▓██▒▓█████▄ ▓██▒▓██▒    ▓██▒▓  ██▒ ▓▒ ▒██  ██▒
  ▒██ ██░▒██░  ██▒▓██  ▒██░▓██ ░▄█ ▒   ▓██ ░▄█ ▒▒███   ░ ▓██▄   ▓██░ ██▓▒▒██░  ██▒▓██  ▀█ ██▒░ ▓██▄   ▒██▒▒██▒ ▄██▒██▒▒██░    ▒██▒▒ ▓██░ ▒░  ▒██ ██░
  ░ ▐██▓░▒██   ██░▓▓█  ░██░▒██▀▀█▄     ▒██▀▀█▄  ▒▓█  ▄   ▒   ██▒▒██▄█▓▒ ▒▒██   ██░▓██▒  ▐▌██▒  ▒   ██▒░██░▒██░█▀  ░██░▒██░    ░██░░ ▓██▓ ░   ░ ▐██▓░
  ░ ██▒▓░░ ████▓▒░▒▒█████▓ ░██▓ ▒██▒   ░██▓ ▒██▒░▒████▒▒██████▒▒▒██▒ ░  ░░ ████▓▒░▒██░   ▓██░▒██████▒▒░██░░▓█  ▀█▓░██░░██████▒░██░  ▒██▒ ░   ░ ██▒▓░
   ██▒▒▒ ░ ▒░▒░▒░ ░▒▓▒ ▒ ▒ ░ ▒▓ ░▒▓░   ░ ▒▓ ░▒▓░░░ ▒░ ░▒ ▒▓▒ ▒ ░▒▓▒░ ░  ░░ ▒░▒░▒░ ░ ▒░   ▒ ▒ ▒ ▒▓▒ ▒ ░░▓  ░▒▓███▀▒░▓  ░ ▒░▓  ░░▓    ▒ ░░      ██▒▒▒
 ▓██ ░▒░   ░ ▒ ▒░ ░░▒░ ░ ░   ░▒ ░ ▒░     ░▒ ░ ▒░ ░ ░  ░░ ░▒  ░ ░░▒ ░       ░ ▒ ▒░ ░ ░░   ░ ▒░░ ░▒  ░ ░ ▒ ░▒░▒   ░  ▒ ░░ ░ ▒  ░ ▒ ░    ░     ▓██ ░▒░
 ▒ ▒ ░░  ░ ░ ░ ▒   ░░░ ░ ░   ░░   ░      ░░   ░    ░   ░  ░  ░  ░░       ░ ░ ░ ▒     ░   ░ ░ ░  ░  ░   ▒ ░ ░    ░  ▒ ░  ░ ░    ▒ ░  ░       ▒ ▒ ░░
 ░ ░         ░ ░     ░        ░           ░        ░  ░      ░               ░ ░           ░       ░   ░   ░       ░      ░  ░ ░            ░ ░   
 ░ ░                                                                                                            ░                           ░ ░     
SuiMikira
Member
**
Offline Offline

Activity: 364
Merit: 10


View Profile
June 20, 2018, 02:54:28 PM
 #4

Following yours, the best option is write it down on paper.  Kiss

But for most sites, for example cryptocurrency exchanges, you can recover your 2FA by using ID or passport.
chetanvineeta
Newbie
*
Offline Offline

Activity: 54
Merit: 0


View Profile
June 20, 2018, 03:04:38 PM
 #5

Following yours, the best option is write it down on paper.  Kiss

But for most sites, for example cryptocurrency exchanges, you can recover your 2FA by using ID or passport.

But that paper can be lost or ca be burned (extreme circumstances). Is it not safe to store them on mail or some cloud with proper encryption of course? I personally write them on notepad, encrypt it and then email it to myself.
DrMill
Jr. Member
*
Offline Offline

Activity: 104
Merit: 1


View Profile
June 20, 2018, 03:45:39 PM
 #6

Following yours, the best option is write it down on paper.  Kiss


If you write down, you'd better write twice, just in case. I'd rather copy to Word, and print out 2 copy, then I keep 1 at home and the other at office. How's that?

https://www.skyfchain.io/
SKYFchain is the first blockchain based
Business-to-Robots (B2R) Operating Platform
chetanvineeta
Newbie
*
Offline Offline

Activity: 54
Merit: 0


View Profile
June 21, 2018, 07:26:15 AM
 #7

Following yours, the best option is write it down on paper.  Kiss


If you write down, you'd better write twice, just in case. I'd rather copy to Word, and print out 2 copy, then I keep 1 at home and the other at office. How's that?

Don't you think by keeping one copy at office, you are taking a risk? I mean, what if someone gets hold of that print out and makes a copy of it and you're not even aware of that? Just a possibility but anything can happen. So better be safe than sorry.
pujarihema
Newbie
*
Offline Offline

Activity: 137
Merit: 0


View Profile
June 21, 2018, 07:46:28 AM
 #8

Following yours, the best option is write it down on paper.  Kiss

But for most sites, for example cryptocurrency exchanges, you can recover your 2FA by using ID or passport.

But that paper can be lost or ca be burned (extreme circumstances). Is it not safe to store them on mail or some cloud with proper encryption of course? I personally write them on notepad, encrypt it and then email it to myself.

I have a better suggestion. Download some app like evernote, save all your passwords and keys there. Now create an email ID and don't use it for any other purposes. Sign in in evernote using that email ID and encrypt the app. There. Now you can access your keys anywhere, on any device with no chances of losing them. Also safe and secure.
Svetlazara
Newbie
*
Offline Offline

Activity: 171
Merit: 0


View Profile
June 21, 2018, 03:16:03 PM
 #9

I have a better suggestion. Download some app like evernote, save all your passwords and keys there. Now create an email ID and don't use it for any other purposes. Sign in in evernote using that email ID and encrypt the app. There. Now you can access your keys anywhere, on any device with no chances of losing them. Also safe and secure.

Please tell me which program to use for encryption? A program that is easy to download and use for a beginner. Thank you
actuallytwolamas
Member
**
Offline Offline

Activity: 69
Merit: 20

Lama


View Profile WWW
June 21, 2018, 03:43:00 PM
 #10

I have a better suggestion. Download some app like evernote, save all your passwords and keys there. Now create an email ID and don't use it for any other purposes. Sign in in evernote using that email ID and encrypt the app. There. Now you can access your keys anywhere, on any device with no chances of losing them. Also safe and secure.

Please tell me which program to use for encryption? A program that is easy to download and use for a beginner. Thank you


You can encrypt text inside Evernote app. You select the text, right click mouse and press Encrypt selected text. That's all.
BTC-BTC-BTC
Legendary
*
Offline Offline

Activity: 1582
Merit: 1001


www.neutroncoin.com


View Profile
June 21, 2018, 03:58:46 PM
 #11

I agree. There are always more ways to protect your crytos. We all should do what is available out there to protect our funds.
HeRetiK
Legendary
*
Offline Offline

Activity: 2940
Merit: 2092



View Profile
June 21, 2018, 05:09:24 PM
 #12

Following yours, the best option is write it down on paper.  Kiss

But for most sites, for example cryptocurrency exchanges, you can recover your 2FA by using ID or passport.

But that paper can be lost or ca be burned (extreme circumstances). Is it not safe to store them on mail or some cloud with proper encryption of course? I personally write them on notepad, encrypt it and then email it to myself.

I have a better suggestion. Download some app like evernote, save all your passwords and keys there. Now create an email ID and don't use it for any other purposes. Sign in in evernote using that email ID and encrypt the app. There. Now you can access your keys anywhere, on any device with no chances of losing them. Also safe and secure.

Encrypted or not, once you start storing your 2FA code in the cloud to be able to access it from anywhere you are kinda killing the purpose of 2FA. Or to be more precise -- once the same device that you use to enter your password can also be used to access your 2FA key, you lose the "2 Factor" part of 2FA. Just a heads up.
actuallytwolamas
Member
**
Offline Offline

Activity: 69
Merit: 20

Lama


View Profile WWW
June 21, 2018, 09:43:01 PM
 #13

Following yours, the best option is write it down on paper.  Kiss

But for most sites, for example cryptocurrency exchanges, you can recover your 2FA by using ID or passport.

But that paper can be lost or ca be burned (extreme circumstances). Is it not safe to store them on mail or some cloud with proper encryption of course? I personally write them on notepad, encrypt it and then email it to myself.

I have a better suggestion. Download some app like evernote, save all your passwords and keys there. Now create an email ID and don't use it for any other purposes. Sign in in evernote using that email ID and encrypt the app. There. Now you can access your keys anywhere, on any device with no chances of losing them. Also safe and secure.

Encrypted or not, once you start storing your 2FA code in the cloud to be able to access it from anywhere you are kinda killing the purpose of 2FA. Or to be more precise -- once the same device that you use to enter your password can also be used to access your 2FA key, you lose the "2 Factor" part of 2FA. Just a heads up.

How many times you had to access your 2FA backup codes? Because in like 4 years, I never had to use my 2FA backup codes. You'll store your codes encrypted in the cloud, with email registered specifically for this purpose. And obviously, if you'll lose your phone or whatever, you don't try to connect from every device possible to your cloud where backup codes are. I don't know, but for me, it looks to store backup codes like that as safe as to store them on the paper.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!