> I have the backup codes carefully preserved.... off site
Yeah f no. Most people just screenshot their backup codes and put it in a Google doc somewhere in plain text, at best. And at worst, they go "what the hell are these codes" and close the window.
Which, security-minded folks would know, is effectively equivalent to just writing passwords down in plain text.
Nobody thought to put even a tiny speck of product management into this system.
Yeah f no. Most people just screenshot their backup codes and put it in a Google doc somewhere in plain text, at best. And at worst, they go "what the hell are these codes" and close the window.
Which, security-minded folks would know, is effectively equivalent to just writing passwords down in plain text.
Nobody thought to put even a tiny speck of product management into this system.