Fuck the 2 factor bullshit. I've lost many accounts just because I moved to another country and changed my number. I still know the password, It is my account but I can't login just because the asshole who created 2 factor authentication never moved out of his parent's basement.

[–] RecluseRamble@lemmy.dbzer0.com 31 points 4 months ago (6 children)

SMS based 2FA isn't recommended and with an authenticator/hardware token your scenario is not a problem.

[–] jj4211@lemmy.world 6 points 4 months ago (5 children)

While true, other scenarios do come into play, like "I'm using a FIDO key but I dropped it down a storm drain". Meaning you pretty much have to provide some recovery mechanism, since you can't really require the user to have a backup device.

[–] bertof@lemm.ee 1 points 4 months ago

That's why it is called multi-factor

load more comments (4 replies)

load more comments (7 replies)