2FA-Recovering your KYC Google Auth Keys.

[condoras]

Any way to make the transfer of all readings from Google Auth to Aegis through QR codes? I have tried but Aegis failed to read QR generated by Google Auth so I have been  forced to transfer data manually, one-by-one, but the problem is 1) I don't have keys for all records 2) it's a time consuming procedure.

I'm almost certain that you can't put a code generated from Google Auth to any other Auth app and I guess the opposite is not possible either.
As for problem #1 you can disable 2FA from the site that you don't have the keys using Google app and then reenable it (thus new QR code) and scan it with Aegis app.
Problem #2 is something unsolved, for now...

[1714946496]

1714946496

[1714946496]

1714946496

[1714946496]

1714946496

[bob123]

I don't have keys for all records

Shouldn't the "export account" function, when exporting only a single 2fa, show the secret of the chosen 2fa ?
Not having a backup is just as bad as not having a backup of passwords etc. If a 2FA is mandatory, you won't gain any access without it resulting in trouble.

It is recommended to always have a backup of 2FA seeds, just as you would with a mnemonic code.

[condoras]

Starting with what kind of mobile you own, would help.
Or searching for "screenshot + [your mobile]" on the internet will yield results, taking less than a minute.

Ok man, I will. For the moment I use a semi-broken screen Xiaomi M1, until my new phone arrives.

[DdmrDdmr]

<…> I believe that Cadaver is aware of it. <…>

Aware and complacent with those/his 2FA code showing (+ 2 email addresses tied to them)?
If they are his, I don’t get why it’s taking so long to take them down (i.e. erase the original image). If on the other hand they are dummy codes, generated to exemplify, then perhaps a note would help to avoid assuming they are his codes being self-leaked and propagated.
 

I know but then the thread will be bigger and (I guess) harder to read it...

Not really. If the images are not massive in size, and they are meaningful to describe the procedure, I doubt anyone will complain (besides the quality thingy).

[condoras]

<…> I believe that Cadaver is aware of it. <…>

Aware and complacent with those/his 2FA code showing (+ 2 email addresses tied to them)?
If they are his, I don’t get why it’s taking so long to take them down (i.e. erase the original image). If on the other hand they are dummy codes, generated to exemplify, then perhaps a note would help to avoid assuming they are his codes being self-leaked and propagated.

Well, until he verifies what is it, I will remove them.

I know but then the thread will be bigger and (I guess) harder to read it...

Not really. If the images are not massive in size, and they are meaningful to describe the procedure, I doubt anyone will complain (besides the quality thingy).

My pic/ photo editing skills are limited but I will try and do my best. I can promise anything though...

[libert19]

Good to see Google authenticator finally got an update, it had been ages. I have moved to Aegis though.

[nakamura12]

Good guidd and also a bit of warning to be careful to your phone. It is much safer if you have to hand written the back up codes even if google auth does have a transfer feature where you can transfer the data to the new phone. Before that, google auth doesn't have that back up feature yet so hand written is the first choice to do and even if it is implemented having second back up is also good if ever you can recover tbe codes on first choice.

[dimonstration]

Method 1: You download the Google Auth to your new phone, you open it and you go to app's "Menu" (the three vertical dots on the top right corner of your phone's screen).
You select "Account Transfer" and a message appears asking you if you want to "Export" your accounts (by creating a QR code which you will scan with your new phone) or to "Import" them (by scanning the QR from your previous phone). Doesn't matter if the camera of your old/ damaged phone doesn't work. You choose "Export accounts", scan the QR with your new phone and you are done.

IMPORTANT NOTE If your phone is lost or it can't be open after damage, this method is not possible. You need to have your old device working (at least the phone's screen).

There is substitute way for this method, You can turn off the 2FA security on the exchange since you can still access the Authenticator app in the old phone then request for a new 2FA key once you have new device that has Authenticator installed. It's advisable if the condition of the old phone was unstable because the old device might get broke anytime considering that you borrow your friends phone to access your exchange and you don't have new device.

The method 2 is a great idea. I don't have any idea that I can access my authenticator data on my email that I used on my account. 

[ice18]

Nice info heres my experienced I ended shifting into authy app after I changed my phone last year and retrieving so many 2fa codes in almost 30+ websites and its ridiculous google auth has no backup feature that time and everytime I changed my phone I always ended like this, thanks for the update op.   

[Asuspawer09]

~

It also happened to me by I didn't recover my code at all  For some exchanger that I use google authenticator some of it when you log in you need to use the code after logging in but it doesn't have an option when you lost your code, etc. and the support is crap.

You could totally import it from different phones when you have a new phone but if you lost your phone is a different story, I've searched on youtube last time what method I can do but you need to do it before you lost your phone, for example, Facebook, which have a backup could that you could use when you lost your google authenticator, etc. There are so many authenticators already that is getting recommended by a lot of users but I only know google but google still a good choice.

Is it a new update from Google? Are every code save in your Gmail can be recovered or saved?

[condoras]

There is substitute way for this method, You can turn off the 2FA security on the exchange since you can still access the Authenticator app in the old phone then request for a new 2FA key once you have new device that has Authenticator installed. It's advisable if the condition of the old phone was unstable because the old device might get broke anytime considering that you borrow your friends phone to access your exchange and you don't have new device.

You are correct, you can do that as long as you trust your friend (lol)

The method 2 is a great idea. I don't have any idea that I can access my authenticator data on my email that I used on my account.  

Tbh I didn't know that either but my friend use a lot this way for recovering or store data from several (if not all) app's. So we try for Google Auth and it works.

You could totally import it from different phones when you have a new phone but if you lost your phone is a different story, I've searched on youtube last time what method I can do but you need to do it before you lost your phone, for example, Facebook, which have a backup could that you could use when you lost your google authenticator, etc.

As far as I know, if you lose your phone and you don't have your recovery 16-digit keys, then you can't do anything to recover them.

There are so many authenticators already that is getting recommended by a lot of users but I only know google but google still a good choice.

I check all the references from our fellow members and it seems that Aegis is for now the best, safest, and stronger (in the matter of choices/ options) Authenticator app. Ofc Goggle will always be Google, whatever that means to anyone...

Is it a new update from Google? Are every code save in your Gmail can be recovered or saved?

Idk if it's a new update but you can recover every single code/ account if you have enabled as 2 Step Verification the Google Auth in your Google account.

It seems that my phone can't take screenshots from Google Auth for some reason. I get a message saying that the app doesn't permit screenshots... That's new for sure!
If can someone verify this or can take some screenshots for Method 1 (without any information such e-mails on them), it will be appreciated.

[DdmrDdmr]

Apparently, Apps can enable the FLAG_SECURE setting to avoid screen captures on the App, or certain screens on the App, reducing the risk of a (another) malicious App being able to issue screen captures from Google Authenticator, whilst running in the background.

See: https://wwws.nightwatchcybersecurity.com/2020/03/03/google-authenticator-for-android-allows-screen-capture/

People reported it as a bug (so as to say, it seems to have been there since 2014), and it appears to be fixed on Android, stating that it cannot capture the screen when you try. Nevertheless, I’ve also tried it on an Iphone and managed to capture a screenshot. I’ve checked on the App store, and the current version on IOS, version 3.0.1 for the App, seems to be from September 2018, which oddly lacks updates since then.

[condoras]

Apparently, Apps can enable the FLAG_SECURE setting to avoid screen captures on the App, or certain screens on the App, reducing the risk of a (another) malicious App being able to issue screen captures from Google Authenticator, whilst running in the background.

See: https://wwws.nightwatchcybersecurity.com/2020/03/03/google-authenticator-for-android-allows-screen-capture/

People reported it as a bug (so as to say, it seems to have been there since 2014), and it appears to be fixed on Android, stating that it cannot capture the screen when you try. Nevertheless, I’ve also tried it on an Iphone and managed to capture a screenshot. I’ve checked on the App store, and the current version on IOS, version 3.0.1 for the App, seems to be from September 2018, which oddly lacks updates since then.

So it seems that the only way is to follow the old school method to post pics, thus our eyes will go crazy! 🤪
It's indeed quite odd that updates lack for this app... Btw, thank's for sharing this info!

[wwzsocki]

I hope this thread will be useful and easy to understand from anyone around. Thank's and BTCe-safe.

It is useful and I am happy that I have read it.

As many members here, I am also using Google Authenticator for my 2FA security settings and wondered already many times, especially when logging in using 2FA, how complicated it could be to get that account on a new phone or to login to exchanges when problems with phone start to occur sooner or later? Of course, I have my codes written on paper and saved but still, I was afraid it will be a lot of problems to get it working.

Now I am delighted one can say  . Not joking here because we have to depend on those things and if something goes wrong many times a lot of money could be lost or get stuck in a volatile market.
I am happy that it is easy as it should be and even a simple Gmail account is enough to clone accounts or get the backup. I am happy that I can finally stop worrying about it.

[erikoy]

I am always having a hard time in 2FA and it may be safe to our part especially securing account but it may als be the reason that I can't access my account especially if the device I am using will be lost. I know that it is for security but I prefer to use the text messaging in my accounts where log in requires to get the code from text message. This is I guess an easy way for me to access my account and getting secure. Same as google authenticator but the problem is one may having difficulties in reseting the password if forgotten.

[AakZaki]

When I started using 2FA, I chose Google Authenticator because it looked simple and looked safer. But over time I wanted to switch to another app like Aunty which has more features than Google.

Google Auth also can't do the previous backup, and that's what made me switch, because I'm worried that if my phone suddenly crashes I don't have a 2FA code backup.

[Sanitough]

When I started using 2FA, I chose Google Authenticator because it looked simple and looked safer. But over time I wanted to switch to another app like Aunty which has more features than Google.

Google Auth also can't do the previous backup, and that's what made me switch, because I'm worried that if my phone suddenly crashes I don't have a 2FA code backup.

I have been using Authy app ever since and I have never face a single problem, have changed my phone several times already but I never have to worried of not being able to access my accounts in different sites as I have an APP also installed in my computer. So any time I could access my account using this 2FA app even without my phone as all devices I used are link to each other.

Just FYI to those who have not use Authy, the app is simple and safe also.

[condoras]

even a simple Gmail account is enough to clone accounts or get the backup. I am happy that I can finally stop worrying about it.

It's indeed very helpful but let's not forget. If you don't set Google Auth, as your Google account Two- Step verification method you can't get a thing. So having a handwritten backup of your keys is a MUST.

It is useful and I am happy that I have read it.

Thank you very much, really appreciate it.

I edit the OP with the only pics that I have for Method 1 (courtesy of Cadaver20). Sorry that isn't screenshots but it's better than nothing.

[skarais]

Good guidd and also a bit of warning to be careful to your phone. It is much safer if you have to hand written the back up codes even if google auth does have a transfer feature where you can transfer the data to the new phone. Before that, google auth doesn't have that back up feature yet so hand written is the first choice to do and even if it is implemented having second back up is also good if ever you can recover tbe codes on first choice.

You don't have to do the traditional way of handwriting notes to manually save code on a piece of paper, just backup it and you just need to re-import it on a new device. Don't worry if your phone is damaged or lost because you still have a backup of the related email.

[tvplus006]

...
When I was a newbie, I simply scanned QR code and 2FA activation was done like that. I don't back up or if I backup I don't test backup's validity.

I use my wife's smartphone as a backup) In my opinion, there is nothing easier than this.  Previously, I used my old smartphone for this purpose. I hope I don't have to use this method to restore my account, but a copy of my 2fa Google Auth must be saved.