Google Authenticator Question

[dave90210]

Now I setup 2 factor authentication with an account online. Now I have to scan a code with my phone to link it with my account. If I don't have that phone let's say it gets lost or stolen I won't be able to access that online account anymore since it links to my phone. If that's the case what do I do?

Is the Google authenticator connected to my gmail account? If so do I just connect my new phone to my gmail account?

[rowan]

It's a good question. The few sites that I use it on seem to suggest that it is permanently linked with your phone - if you lose that, you need to convince the support of that site to disable/change 2FA.

I'll be upgrading my phone this weekend so it will be interesting to see what happens. I'll have to try to remember to temporarily disable 2FA on all of the sites, just in case.

[AllAboutCams]

i use it and always keep a backup copy of the qr code

with authy they link to your number which is better but i hate using it GA is much better overall

[dave90210]

How the fuck do you do that? After you authenticate it the first time you don't get the same qr code again?

i use it and always keep a backup copy of the qr code

with authy they link to your number which is better but i hate using it GA is much better overall

[AllAboutCams]

How the fuck do you do that? After you authenticate it the first time you don't get the same qr code again?

Screen capture

[rowan]

Screen capture

Stored on your phone?

[Slappin Fish]

You don't need to authenticate every time you log on. You authenticate your laptop and desktop once per site and if you lose your phone you can use these machines you already authenticated to log in as usual and disable 2SA. Once disabled it won't be linked to that particular phone anymore, so when you buy a new phone you just re-enable and start again with the new qr code.

[dave90210]

Without my phone sending me a code every time I log I won't be able to assign it to another phone. I would need my phone to get the code the site sends to the authenticator to login. The phone essentially is the key to login. Without the key I can't login at all on any device!

You don't need to authenticate every time you log on. You authenticate your laptop and desktop once per site and if you lose your phone you can use these machines you already authenticated to log in as usual and disable 2SA. Once disabled it won't be linked to that particular phone anymore, so when you buy a new phone you just re-enable and start again with the new qr code.

[AllAboutCams]

Stored on your phone?

No a local copy in truecrypt

[nico-t]

I love how google and other shit sites force you to share more and more personal information with them. All for 'security' ofcourse.

God I hate google so much.

[Slappin Fish]

Without my phone sending me a code every time I log I won't be able to assign it to another phone. I would need my phone to get the code the site sends to the authenticator to login. The phone essentially is the key to login. Without the key I can't login at all on any device!

You don't need a code every time you log in.

I thought I explained it well enough the first time. I already use it. have already lost a phone, etc. You need a code every time you log for the first time from a new machine. Just click "this is a trusted computer" and you won't need a code again for that computer. Make your home home PC's trusted and you can log in from those to turn off 2SA.

[rowan]

You don't need a code every time you log in.

I thought I explained it well enough the first time. I already use it. have already lost a phone, etc. You need a code every time you log for the first time from a new machine. Just click "this is a trusted computer" and you won't need a code again for that computer. Make your home home PC's trusted and you can log in from those to turn off 2SA.

You seem to be talking about a specific site. You know that GA can be used on any site for authentication? On the 3 sites I use it on - none of them Google products - you need to authenticate at each login (session is not perpetual), and also when performing an act which carries risk (eg a withdraw)

[Slappin Fish]

You seem to be talking about a specific site. You know that GA can be used on any site for authentication? On the 3 sites I use it on - none of them Google products - you need to authenticate at each login (session is not perpetual), and also when performing an act which carries risk (eg a withdraw)

I know, you can use it for lastpass, facebook, dropbox. etc

Most have a "trusted computer" options, those that don't like Lastpass have a link to disabled it by email.

I can only think of coinbase that doesn't. They send a sms when you lose your code, which is ridiculous since chances are your phone is lost..

Best is to install the Authy app, site entries are automatically added to Authy

https://play.google.com/store/apps/d...om.authy.authy

https://itunes.apple.com/us/app/authy/id494168017?mt=8