Hacker News new | past | comments | ask | show | jobs | submit login

That's what the backup codes 2FA provides are for, no?



I've lost those in the same theft as I lost my 2fa device for github. Not going to store them outside of my password manager for github again.

So why do I use 2fa for github? Because organizations require it.


There are still benefits of 2fa even if codes are stored in your password manager. It protects against most keyloggers. It probably makes phishing a little less likely (because most websites cache 2fa, so you'll be a little more suspicious when asked for it by a phishing site). It protects people who use weak or reused passwords. Sometimes it causes support staff to be more careful with regard to social engineering.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: