How to prevent lost of 2FA key

[Charles-Tim]

Almost 5 years I have not used GA. I use Authy for the security of my account. I don't know if GA can be duplicated to other phones, but Authy can. You only need to remember the password with your email. I don't know this is a plus or a minus. Maybe if you lose your phone it will be easier to get backups.

With the latest update on google 2fa, you can make a QR code backup of the sites you want to. All you need to do is to:

• Open the google 2fa
• Click on the three dots at the top right corner
• Click on transfer accounts you want to backup
• Click on export accounts
• Making sure all the site you make authentication for are marked
• Then click on next

You will see a QR code, you can backup the QR code which consist of all the sites you selected and can be used on any new device to retrieve your 2fa authenticator.

If you don't have the recovery code for the exchange (I assume you are trying to login to an exchange) all you can do is contact the customer service department of the site and request that they reset your code. Be prepared to go through KYC and waiting days and weeks for them to respond.

What I have noticed about exchanges is that if no kyc was done before by the user before the lost of the account, the account will be lost forever. But, if the person has verified his account before the account loss, then the customer care can request for certain credentials to help prove the user is the right owner of the account, which will be used to recover the account to the rightful owner.

[1715246365]

1715246365

[1715246365]

1715246365

[1715246365]

1715246365

[plexasm]

you shouldn't have your 2FA accessible from a device which you use for other things. highly suggest getting a separate phone or tablet dedicated to 2FA only.

backing up the codes is the easy part: write them down and secure them safely.

[libert19]

I use aegis, personally find it much better than Google 2fa, you can back it up encrypted and store it in cloud storage, pen drive to stay safe.

[Obito]

you shouldn't have your 2FA accessible from a device which you use for other things. highly suggest getting a separate phone or tablet dedicated to 2FA only.

backing up the codes is the easy part: write them down and secure them safely.

It is the best option but considering that not everyone can afford to buy another phone just for that purpose, I think that the best thing to secure your 2FA is to remember your account and to put an app locker on your email application so whenever the worst thing were to happen to your phone like being stolen, then you won't have to worry about your important emails and credentials being compromised or you can install an app in your phone that will brick it when it gets stolen.

[Luzin]

I'm afraid it's a minus, and a big one at that, which is why most people no longer recommend it.

Thanks in advance, this is great for me. Previously, I used Authy because of the email backup feature, it looks like it's easier but it also seems to lack. About Authy and the problem is no longer Open Source that just knew from you. Maybe I need to switch from Authy, are there any 2FA recommendations that are best for me?

[o_e_l_e_o]

Maybe I need to switch from Authy, are there any 2FA recommendations that are best for me?

As has been mentioned above, Aegis is a good choice for Android. It is entirely open source, keeps all your data encrypted locally, and allows you to perform encrypted back ups and exports so you can save your database on an external device for easy recovery should your phone be lost or damaged.

For Apple, I believe the best option is Tofu authenticator instead. It is also open source, but unfortunately does not allow local back ups, instead opting to back up your database encrypted inside your iCloud Keychain if you choose.

Whichever option you choose, you should still write down the shared secret for each site on paper when you first enable/switch over your 2FA.

[Asuspawer09]

I mean if you lost your phone with your 2FA like Google Authenticator, straight up it was already lost and you can't really recover that authenticator when you relog or something.

Your best option at this point was to pm the support of the individual website that your 2FA authenticator is activated, or if you have the recovery code in the individual website you can still recover it.

Some websites have a recovery code for 2FA so that you could easily recover it but I don't think all websites have it or maybe it was just difficult to get the recovery code for some since it doesn't show in the website, or else you need to pm the support.

[RickDeckard]

Maybe I need to switch from Authy, are there any 2FA recommendations that are best for me?

Besides the reasons already stated by o_e_l_e_o , Authy, although being an app that is used by many, it's closed source. Whenever available you really should go for Open Source apps, such as andOTP and Aegis ...

[00blackminer00]

hi Lapinouadead,
i see your example with losing the phone and understand your concerns and i would like to share with you that i have been locked out of 2fa protected accounts before>more than once.Back in the day,one of the first companies to offer two-factor authenticator was Blizzard.World Of Warcraft players got access first,since they eneded to protect their hard-earned loot. You may recall people walking around with WOW keychains thet displayed changing digits on an LCD.
thansk for your time hope it was useful