Bitcoin Forum
November 21, 2018, 08:54:23 AM *
News: Latest Bitcoin Core release: 0.17.0 [Torrent].
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: Two Factor Authentication - 2FA  (Read 347 times)
Hosam Mazawi
Member
**
Offline Offline

Activity: 112
Merit: 10


View Profile
December 05, 2017, 09:34:00 PM
 #1

It's not easy to lose your funds, and a lot of people are trying to secure their funds, so I decided to write simple guide hopefully will be useful for people.

1. Any exchange has almost 2FA, to activate it go to settings, look for security and you should find it there
2. Before activating, make sure you download the google authenticator on your smartphone
3. When you are about to activate it, you will see on the screen barcode and above/near it also recovery code (Copy that code on piece of paper, make 2-3 copies and keep them safe)
4. Open your google authenticator app, click on + , you will see two options, scan barcode and enter a provided key (that's the code I mentioned in section
    3, you will need it in the future)
5. Click scan barcode and scan the barcode you have on the exchange, then you will see on the app name of the exchange and 6 digits code that changes every 30 seconds, put the code on the exchange and confirm.
Now your account on the exchange is secured by another layer.
6. Each time you will log in the exchange you will be asked to put the code from the google authenticator app, so if anyone has your email and password he can not login .... (not yet, he still can somehow, will explain)
7. What about you gmail account? now you should also secure that part, on gmail hit the circle with you photo and click on my account
8. Or simply follow the instruction by google: https://support.google.com/accounts/answer/185839?hl=en
9. After activate your 2FA on google, make sure you backup your 2fa for gmail and get 10 codes to have the ability to login to your gmail if you lose your phone
10. now what if you lose your phone?
in the case of the exchange: you got the recovery code, you just need new phone, download the google authenticator app and add the recovery code and again you will have the  digits codes on your new phone
11. For your gmail, if you did backup, you can use one of the 10 codes you got, dont save them on your laptop write them down, login then you can disable the 2FA from gmail and reactivate it.
Or if you printed out the barcode that's also an option, I would not prefer that as you might leave it behind on your laptop, same thing you can do with the barcode you see on the exchange, you can print it out and use it as recovery instead of the code mentioned in section 3.

Why you should also secure your email although you have 2FA on the exchange?
Because if you are victim of phishing website or someone put keylogger on you PC he can take your email and password, login you email, change your password and lock you our.
He will try to rest your password from the exchange and you have no way to do anything almost, if he has more information about you and the exchange give him the opportunity to disable the 2FA you lost your funds
1542790463
Hero Member
*
Offline Offline

Posts: 1542790463

View Profile Personal Message (Offline)

Ignore
1542790463
Reply with quote  #2

1542790463
Report to moderator
1542790463
Hero Member
*
Offline Offline

Posts: 1542790463

View Profile Personal Message (Offline)

Ignore
1542790463
Reply with quote  #2

1542790463
Report to moderator
1542790463
Hero Member
*
Offline Offline

Posts: 1542790463

View Profile Personal Message (Offline)

Ignore
1542790463
Reply with quote  #2

1542790463
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1542790463
Hero Member
*
Offline Offline

Posts: 1542790463

View Profile Personal Message (Offline)

Ignore
1542790463
Reply with quote  #2

1542790463
Report to moderator
1542790463
Hero Member
*
Offline Offline

Posts: 1542790463

View Profile Personal Message (Offline)

Ignore
1542790463
Reply with quote  #2

1542790463
Report to moderator
1542790463
Hero Member
*
Offline Offline

Posts: 1542790463

View Profile Personal Message (Offline)

Ignore
1542790463
Reply with quote  #2

1542790463
Report to moderator
iasenko
Sr. Member
****
Offline Offline

Activity: 378
Merit: 643


Bitcointalk Memes,post yours here> topic=4937275.0


View Profile WWW
December 05, 2017, 10:07:07 PM
 #2

I have been through this before, I lost my phone and I had no backup codes for the google authenticator. I manage to recover all my accounts back but it took around 2 weeks to get all back. You need to prove that you are the owner of the account.

Knightly
Member
**
Offline Offline

Activity: 127
Merit: 10


View Profile
December 05, 2017, 10:13:24 PM
 #3

Good guide mate. It's nice to see people helping others off their own back - good on you.

I factory reset my android phone a few months back in a hurry and wrongly assumed my 2FA codes would be backed up to Google and reinstall on the other side. Let's just say I was wrong. Took me up to a month to get access to all my exchanges.

Everyone, take 2FA seriously - back that stuff up!

Good luck.

-Knightly.
TryNinja
Hero Member
*****
Offline Offline

Activity: 840
Merit: 802


ChipMixer's Badge of Honor


View Profile
December 06, 2017, 01:44:30 AM
 #4

Why even bother to use Google Authenticator? You can download a open source 2FA app such as andOTP[1] that has the option to backup and restore 2FA codes. Then, you can just set up your 2FA and upload an encrypted backup to any free cloud provider you want. Never losing access to your accounts again.

[1] https://play.google.com/store/apps/details?id=org.shadowice.flocke.andotp&hl=pt_BR

Hosam Mazawi
Member
**
Offline Offline

Activity: 112
Merit: 10


View Profile
December 06, 2017, 07:55:15 AM
 #5

Why even bother to use Google Authenticator? You can download a open source 2FA app such as andOTP[1] that has the option to backup and restore 2FA codes. Then, you can just set up your 2FA and upload an encrypted backup to any free cloud provider you want. Never losing access to your accounts again.

[1] https://play.google.com/store/apps/details?id=org.shadowice.flocke.andotp&hl=pt_BR


That is also an option. Never used that so I can't guide someone less
aveon
Member
**
Offline Offline

Activity: 392
Merit: 10

Altair VR. Next-gen Blockchain VR Wikipedia


View Profile
December 06, 2017, 08:11:12 AM
 #6

I have this notification in poloniex but I'm not sure whether I need it or not.

kojoannan
Member
**
Offline Offline

Activity: 266
Merit: 10


View Profile
December 06, 2017, 09:31:11 AM
 #7

Two factor Authentication is useless without a strong password to your phone or carefully keeping your phone out of reach of people who can access your account.

════════⟹  Pro Fish  ⟸════════
The ProFish online marketplace & tournaments
⋄❖⋄ Twitter ⋄❖⋄ Telegram ⋄❖⋄ Facebook ⋄❖⋄ Instagram
Hosam Mazawi
Member
**
Offline Offline

Activity: 112
Merit: 10


View Profile
December 06, 2017, 10:44:34 AM
 #8

Two factor Authentication is useless without a strong password to your phone or carefully keeping your phone out of reach of people who can access your account.

Well if you lose your phone, you have the recovery codes saved one the side, if you are fast enough to get smartphone from someone you can save yourself.

There is always way to get hit, but it does help a lot from online attacks
05w3z0
Member
**
Offline Offline

Activity: 296
Merit: 10


View Profile
December 06, 2017, 03:28:08 PM
 #9

Two factor Authentication is mostly again online threats and hackers, if youre in situation someone may look at your phone and steal passwords then you should choose people youre hanging with more carefully Cheesy

   ⚡⚡ PRiVCY ⚡⚡   ▂▃▅▆█ ✅ PRiVCY (PRIV) is a new PoW/PoS revolutionary privacy project ● ☞ ✅ Best privacy crypto-market! ● █▆▅▃▂
    Own Your Privacy! ─────────────────║ WebsiteGithub  |  Bitcointalk  |  Twitter  |  Discord  |  Explorer ║─────────────────
   ✯✯✯✯✯                 ✈✈✈[Free Airdrop - Starts 9th June]✅[Tor]✈✈✈ ║───────────║ Wallet ➢ ✓ Windows  |  ✓ macOS  |  ✓ Linux
Hosam Mazawi
Member
**
Offline Offline

Activity: 112
Merit: 10


View Profile
December 06, 2017, 08:59:07 PM
 #10

Two factor Authentication is mostly again online threats and hackers, if youre in situation someone may look at your phone and steal passwords then you should choose people youre hanging with more carefully Cheesy

LOL it can happen and you can prevent that easily. for example some exchanges give you the option to put 2FA on withdraw or even on sell orders. so he will have to get the code more than once.
ZCoinTalk
Member
**
Offline Offline

Activity: 154
Merit: 10


View Profile
December 06, 2017, 09:20:31 PM
 #11

The idea behind Two Factor Authentication is:
- you know something: your password
- you have something: the 2FA code generated by your app

Let's say you go to an internet cafe (they still exist right?). You go to a website and you enter your password. Unfortunately the owner of the cafe has a keylogger installed on all the computers and he is tracking the keys that you've typed in. Now he has access to your account.

If you had 2FA on he would have been able to do step 1 (your password), but wouldn't be able to login because he doesn't have your 2FA code.

I would enable it where-ever you can, especially on things like email. Because most sites use your email for password resets.
Hosam Mazawi
Member
**
Offline Offline

Activity: 112
Merit: 10


View Profile
December 06, 2017, 09:42:56 PM
 #12

I have this notification in poloniex but I'm not sure whether I need it or not.

If you are holding big amount of money that you dont want to lose, then yes you must use it. but again learn how to use it and how to recover it if you lose your phone.
05w3z0
Member
**
Offline Offline

Activity: 296
Merit: 10


View Profile
December 07, 2017, 03:56:17 PM
 #13

Quote
If you are holding big amount of money that you dont want to lose, then yes you must use it. but again learn how to use it and how to recover it if you lose your phone.
That's why you need to backup your phone so you can recover it from backup Cheesy

   ⚡⚡ PRiVCY ⚡⚡   ▂▃▅▆█ ✅ PRiVCY (PRIV) is a new PoW/PoS revolutionary privacy project ● ☞ ✅ Best privacy crypto-market! ● █▆▅▃▂
    Own Your Privacy! ─────────────────║ WebsiteGithub  |  Bitcointalk  |  Twitter  |  Discord  |  Explorer ║─────────────────
   ✯✯✯✯✯                 ✈✈✈[Free Airdrop - Starts 9th June]✅[Tor]✈✈✈ ║───────────║ Wallet ➢ ✓ Windows  |  ✓ macOS  |  ✓ Linux
Dudeperfect
Hero Member
*****
Offline Offline

Activity: 1022
Merit: 531

★YoBit.Net★ 350+ Coins Exchange & Dice


View Profile WWW
December 07, 2017, 04:05:53 PM
 #14

Yes, I do use 2FA for my online accounts and since there is a possibility of losing the device or damaging it, I also have back up codes to deal with such situation. However, I believe that even 2FA wouldn't help us in case of the data compromisation from the server side and hence I have rarely maintained more than 20% funds online. 2FA really helps to protect the account but changing primary passwords more often should be a regular practice.

Hosam Mazawi
Member
**
Offline Offline

Activity: 112
Merit: 10


View Profile
December 10, 2017, 10:12:16 AM
 #15

Yes, I do use 2FA for my online accounts and since there is a possibility of losing the device or damaging it, I also have back up codes to deal with such situation. However, I believe that even 2FA wouldn't help us in case of the data compromisation from the server side and hence I have rarely maintained more than 20% funds online. 2FA really helps to protect the account but changing primary passwords more often should be a regular practice.

Absolutely, there is no way to protect yourself from that other than keeping thw majority of your holdings off the exchanges.
neverluckymofo
Newbie
*
Offline Offline

Activity: 38
Merit: 0


View Profile
December 10, 2017, 11:04:56 AM
 #16

Good guide bro. It's nice to see you helping others. I'm new to cryto and definitely going to implement 2FA into all my exchanges and email accounts.
TNAlwis
Newbie
*
Offline Offline

Activity: 350
Merit: 0


View Profile
December 10, 2017, 08:24:10 PM
 #17

These days very important 2 Factor Authentication for our accounts. It will secure our accounts from unauthorized login. Very effective guide. Thank you.
MP4
Member
**
Offline Offline

Activity: 84
Merit: 10


View Profile
December 10, 2017, 10:52:26 PM
 #18

it is important to have 2FA for second security. I prefer to take google auth, but even if you have it, be carefull with everything
cryptoziggurat
Newbie
*
Offline Offline

Activity: 23
Merit: 0


View Profile
March 08, 2018, 03:31:21 AM
 #19

In another forum i posted some information and useful links regarding 2FA:
http://thecryptocrow.com/showthread.php?118-2FA-2-Factor-Authentication

(if i'm not allowed posting external links, let me know, i read the bitcointalk rules but didn't see any particular rule about this).
mundang
Hero Member
*****
Offline Offline

Activity: 882
Merit: 500


The stock photography revolution


View Profile
March 08, 2018, 12:02:30 PM
 #20

2fa is the most secured way to prevent hackers from stealing your coins,it is required to use 2fa when you have account on exchanges.



     ▄██    ▐███████▄▄▄       ▄▄█████▄▄      ▄██▄      ▐██▄    ▒▓▓▄      ▄▓▓▒
     ███    ▐██▌▀▀▀▀▀███▄    ███▀▀▀▀▀███▄    ████▄     ▐██▌  ▐▓▄ ▀▓▓▄  ▄▓▓▀ ▄▓▌
     ███    ▐██▌      ███   ███▌      ███▌   ██████    ▐██▌   ▀▓▓▄ ▀▓▓▓▓▀ ▄▓▓▀
     ███    ▐██▌    ▄████  ▐███▌      ▐██▌   ███ ███▄  ▐██▌     ▀▓▓▄ ▀▀ ▄▓▓▀
     ███    ▐█████████▀▀   ▐███▌      ▐██▌   ███  ▀███ ▐██▌      ▓▓▓    ▓▓▓
     ███    ▐██▌   ▀███     ███▌      ███▌   ███    ██████▌   ▄▓▓▀ ▄▓▓▓▓▄ ▓▓▓▄
     ███    ▐██▌     ███    ▀███▄▄▄▄▄████    ███     ▀████▌  ▐▓▀ ▄▓▓▀  ▀▓▓▄ ▀▓▌
     ███    ▐██▌      ███     ▀▀██████▀▀     ███       ███▌    ▄▓▓▀      ▀▓▓▄
                  ▄▄▄█████▄▄▄▄
             ▄▄█▓▓▓▓▓█▀▀▀▀█▓▓▓▓▓█▄
           ▄▓▓▓█▀▀            ▀▀█▓▓█▄
         ▓▓▓█▀                    ▀▓▓█▄
       ▄▓▓▓▀                        ▀▓▓█
      ▄▓▓█                            █▓▓
      ▓▓▓                    ▄██▄     ▐▓▓█
     ▓▓▓                   ▄█▓▓▀       ▐▓▓▌
     ▓▓▓                 ▄█▓▓▀          ▓▓▓
     ▓▓▓       ▓▓▓▄    ▓▓▓▓▀            ▓▓▓
     ▓▓▓        ▀▓▓▓▄█▓▓▓▀             ▐▓▓▌
     ▀▓▓▓         ▀█▓▓█▀               █▓▓
      ▓▓▓▄                            ▓▓▓▌
       ▓▓▓█                         ▄█▓▓▀
        ▀▓▓█▄                     ▄▓▓▓█▀
          ▀▓▓▓█▄               ▄▄█▓▓█▀
            ▀▀█▓▓▓█▄▄▄▄▄▄▄▄▄▄█▓▓▓█▀
                ▀▀██▓▓▓▓▓▓▓███▀▀
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!