this post was submitted on 22 Aug 2023
396 points (98.5% liked)

Technology

34977 readers
107 users here now

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

founded 5 years ago
MODERATORS
 

I personally am fine with this.

you are viewing a single comment's thread
view the rest of the comments
[–] SkaveRat@discuss.tchncs.de 1 points 1 year ago (2 children)

do you have the backup codes somewhere? Could help

[–] ReversalHatchery@beehaw.org 1 points 1 year ago (1 children)

Also, thinking about it, the prompt does not give an option to use a recovery code, but only to try with the phone number (which is dead by now), or contact support.

[–] SkaveRat@discuss.tchncs.de 1 points 1 year ago (1 children)

tbf, that's a bit on you. The whole point of 2FA is to prove that you are you. and if you completely killed that factor without deactivating it first or having a backup in any way, I can see the support not doing much. I'd be pissed if someone could just contact support and deactivate my 2FA method

[–] ReversalHatchery@beehaw.org 1 points 1 year ago

I didn't enable it because I wanted it for security, but because twitch required it. And then I have set it up with TOTP for security while I was doing it, which does not work anymore either. Also, I did not kill the phone number, it is a public phone number that doesn't receive messages anymore. And if you blame me for not wanting to give up my own phone number, I don't know that to tell you. My privacy matters much more than caring about the possibility that someone finds out my 30 long random password and catches the SMS code from the website where they were shown.

I can see the support not doing much. I'd be pissed if someone could just contact support and deactivate my 2FA method

The 2FA prompt itself tells to contact support in cases like this.
Other than that, email verification is perfectly fine for verifying that it's me. The address was never changed. Actually, as I have seen in a friend's account they are using email already as 2FA for logins, if you don't have any other way set up, maybe for other functions too.

[–] ReversalHatchery@beehaw.org 1 points 1 year ago

I don't. Not sure whether they even provided those when I have set it up, maybe they thought that since it's stored online you can't just lose it, but I really don't remember whether there was any I could have saved. It way years ago.