THE IMPORTANCE OF 2FA AUTHENTICATION.

[Myleschetty]

For people who constantly move funds between wallets, exchanges, casinos, and sometimes even P2P platforms, 2FA is the cheapest form of insurance any crypto user can have.

Cheapest. Is there's a certain few for using 2FA that I am not aware about?

It is one of those things people know they should enable but often ignore because it feels like extra work. Google authenticator/ Authy are more secure than SMS which can easily be hijacked through SIM swap attack.

There's no doubt that 2FA is nice to add to every crypto and gambling related website we should but I will never suggest the use of Google authentication and Authy. Instead of using any of the 2 why not use Aegis which open source.

[goro_chief]

For people who constantly move funds between wallets, exchanges, casinos, and sometimes even P2P platforms, 2FA is the cheapest form of insurance any crypto user can have. It is one of those things people know they should enable but often ignore because it feels like extra work. Google authenticator/ Authy are more secure than SMS which can easily be hijacked through SIM swap attack. Also, for wallets that support it, a physical security key like yubikey is even stronger. Most especially, gamblers need 2FA authentication, because we move fund more often than investors. Every deposit, withdrawal, small balance left on the exchange need to be protected. With fast transactions, and occasional ask platforms, one need every layer of protection they can get.

Question for the more experienced users here: for those using Google Authenticator, what's your strategy for migrating to a new phone? I've heard stories of people losing access because they didn't transfer properly. Is it better to use something like Authy that has cloud backup (even though that's another potential risk vector), or just be super careful with manual transfers and backup codes? Trying to balance convenience and security for my exchange and gaming accounts.

[Karl_3000]

Though I've move way past google authenticator and authy ages ago as I found a better app. IIRC authy was even compromised at some point? In any case I suggest you use Aegis Aunthenticator instead, see: https://getaegis.app/

It is so much better: open source, reputed, regularly maintained, locally stored, encrypted, and I personally like its backup scheme — good balance of security and convenience. Just keep multiple backups and update regularly.

The reason I do not like both Google and Authy authenticator is because they are encouraging people to backup their secret keys online so that people can use their email to recover them back easily but that can do more harm than good. I also prefer Aegis for Android and Tofu for iOS devices, but I am using Android.

[Alphakilo]

Yep. I tend to enable TOTP 2fa to accounts I use a lot whenever it is available.

Though I've move way past google authenticator and authy ages ago as I found a better app. IIRC authy was even compromised at some point? In any case I suggest you use Aegis Aunthenticator instead, see: https://getaegis.app/

It is so much better: open source, reputed, regularly maintained, locally stored, encrypted, and I personally like its backup scheme — good balance of security and convenience. Just keep multiple backups and update regularly.

I do use 2FA for majority of my accounts because I believe in how it is security standard and helps anyone login in to be sure they want to actually login by sending a notification to another channel like an email or by sms, and having the codes regularly change within the time frame.
It is advised to be used and it also has some cloud features for recent upgrades and i think one should be smart enough to do the proper security settings and linkage and cloud backup storage 2FA in the space in case of loss of device or it gets bad or theft.
That is, do try to save your backup/secret keys when using 2FA and one can decide to try out Authy which isn't like google authenticator, because it allows encrypted clod backup that make switching to a new device easy and seamless.

[Hispo]

Right, two factor authentication is important, but it is not something exclusive from casinos and bookies, it is rather something which was first implemented in centralized exchanges and bank applications, by the way.
anyways, I have always thought it is worth it to set up two factor authentication, regardless one has little or much money on one's casino accounts it is advisable to have those security option enabled. I have seen people getting hacked in very dumb and stupid ways, being the most serious cases related to sim-swap...

If anyone of you have set-up your phone number as main verification for their casino, it would be better just to disable it and just use a 2FA key instead.

[stadus]

I’ve been using Authy for years already, and just last year, or maybe this year, if I’m not mistaken, they stopped supporting Windows. Because of that, I can’t use it on my PC anymore.

I still have it on my phone though, and it’s as convenient as ever. I can even link it with my other phone. For me it’s not really a hassle, but I usually don’t use it for gambling sites. I mostly use it for exchange accounts.

[nemesis_incarnate]

2FA is just another risk-management tool, and I agree with what you said about it initially - having it anywhere where it's an option is a must as long as the place itself is reputable.

Where did you read or hear this from? That 2FA is risk management tool? You can easily know what risk management is from its name 'riisk management'. 2FA is not a risk management tool.

I consider 2FA a risk management tool for the cyber security of a person in question.

Maybe it would be better called a risk mitigation tool.. Though I see both terms working fine.

[iv4n]

I didn't get these for a while... but in the past few days, scammers have been pretty active. So yes, we definitely need protection, and 2FA is one of the options. But it's not just 2FA... people need to be careful when visiting sites, adding extensions, downloading, and other things. Shit happens, so don't allow it to happen to you... Do what you need to do to be protected.

By the way, I am from Serbia...

[mirakal]

By the way, I am from Serbia...

Different IPs and different locations. Scammers are probably using VPNs so they won’t be tracked easily. Scammers these days are smarter too, that’s why we also need to improve our knowledge so we don’t fall for phishing attempts. From what I know, on most casinos, once your account has 2FA enabled, they don’t usually send email verification anymore. If they do, it’s only on rare occasions, like when there’s something unusual going on with your account activity.

[Boiboi20]

For people who constantly move funds between wallets, exchanges, casinos, and sometimes even P2P platforms, 2FA is the cheapest form of insurance any crypto user can have. It is one of those things people know they should enable but often ignore because it feels like extra work. Google authenticator/ Authy are more secure than SMS which can easily be hijacked through SIM swap attack. Also, for wallets that support it, a physical security key like yubikey is even stronger. Most especially, gamblers need 2FA authentication, because we move fund more often than investors. Every deposit, withdrawal, small balance left on the exchange need to be protected. With fast transactions, and occasional ask platforms, one need every layer of protection they can get.

Totally agree if you are moving funds around a lot especially for gambling 2FA is not optional anymore it might feel like a hassle but it is way better than losing your funds app based authenticator or hardware keys are much safer than sms and in crypto you really can’t have too much security.

[mitchr4]

I’ve been using Authy for years already, and just last year, or maybe this year, if I’m not mistaken, they stopped supporting Windows. Because of that, I can’t use it on my PC anymore.

I still have it on my phone though, and it’s as convenient as ever. I can even link it with my other phone. For me it’s not really a hassle, but I usually don’t use it for gambling sites. I mostly use it for exchange accounts.

Even though it's no longer available for Windows, at least it still works perfectly on mobile devices. I actually prefer using the authenticator app on my phone rather than on PC anyway. It's easier when I'm away from my PC. And since I mostly use my phone for gambling, having the authenticator on phone is really useful.

[Don Pedro Dinero]

Are you joking? I only have just little amount of money on my gambling account, something like $10 to $50.

That's exactly what I thought while I was reading the OP.

Whenever you are holding more than a few bucks in a casino, like 100 usd, you should enable 2fa.

That's right, I've used 2fa at some point and I think that's a good general rule. But in my case, as I said, I usually bet small amounts, and at one point I deposited £100, had a stroke of luck winning a couple of hundred more, so what I did was withdraw the excess and leave the initial £100. From then, the balance went down, so in general no need for me to use it.

[stadus]

I’ve been using Authy for years already, and just last year, or maybe this year, if I’m not mistaken, they stopped supporting Windows. Because of that, I can’t use it on my PC anymore.

I still have it on my phone though, and it’s as convenient as ever. I can even link it with my other phone. For me it’s not really a hassle, but I usually don’t use it for gambling sites. I mostly use it for exchange accounts.

Even though it's no longer available for Windows, at least it still works perfectly on mobile devices. I actually prefer using the authenticator app on my phone rather than on PC anyway. It's easier when I'm away from my PC. And since I mostly use my phone for gambling, having the authenticator on phone is really useful.

Even before they dropped support for Windows, I already had it on my phone. So it’s still very convenient since I can log in to the sites I need using my phone as the 2FA device.

I don’t really know why they stopped supporting Windows, especially since there are still a lot of Windows users.

It would’ve been better if it was still available on PC or laptop, so if one device is lost, there’s still another option to use.

[melinoe]

As long as the platforms we play on are not copies of the original ones to fish out our data.. yeah.

Nowadays, there are many cases that lead to bad consequences in the perspective, and they are avoidable by just being curious / vigilant enough.

What are you trying to communicate to us here? I read your post over and over again but I did not understand it at all than seeing it as spam.

The main point is that we need to use every tool at our disposal to make it count, because our funds are on the line.

[michellee]

We need to responsible with our account with the funds inside. 2FA is a feature of the platforms that we can use to protect our account from hacking. At least, we can secure our accounts so the hacker will be difficult entering to our accounts.

We may activate 2FA on our wallets and exchanges but not in casinos because we think that we don't have large capital. But it is a precaution that we can do to secure our accounts. By activating 2FA, we will feel better from the hack but we don't have to keep a large capital in our casino accounts.

[Vaculin]

We may activate 2FA on our wallets and exchanges but not in casinos because we think that we don't have large capital. But it is a precaution that we can do to secure our accounts. By activating 2FA, we will feel better from the hack but we don't have to keep a large capital in our casino accounts.

Being able to see that feature should already tell us that casinos are at least doing something to protect gamblers. That’s a different thing from casinos actually stealing from players, which is another issue entirely. 

In the end, it’s really up to us whether we activate it or not. Some people prefer not to because it takes extra time and feels like a hassle. But at the same time, accessing an account without 2FA is way too easy, especially if everything is just linked to email and you can log in with almost no friction.

[danadc]

I love protection and anything that enhances my safety for me, any layer of security is welcome, 2FA is my favorite I've activated others like exclusive keys, and even phone number activation. I'm the same in casinos some time ago I lost 3mA in a casino and I didn't feel like losing any more.
 

[Charles-Tim]

In the end, it’s really up to us whether we activate it or not. Some people prefer not to because it takes extra time and feels like a hassle.

To setup the 2FA is not hard at all, at least the person will have other platforms that will also encourage the use of 2FA. A good example are the exchanges.

Or do you mean the gambling site will be requesting for the 2FA anytime someone wants to login? If you are active on the site, you may be able to access the site without login.

On Stakes.com, I always able to access the site without no need to login, as long as I do not log out.

[Judith87403]

Strong take. Those moving crypto more often are the ones exposed frequently, therefore more security is important. 2FA is simple, less expensive, and blocks a lot of attacks that seem common. Authenticator that are based on app are considered safer than sms, and hardware keys makes it stronger. For those gambling mostly, steady deposit and withdrawals raise possible risk, hence depending on speed alone is dangerous. Security has to move as quick as the funds do.