Reply to thread

Message

<blockquote data-quote="notabot" data-source="post: 843321" data-attributes="member: 75970">The point of 2FA is that it&#039;s a second authentication factor, it&#039;s not to be unable to recover your account, it&#039;s not meant to be non-reset-able by the service provider.&nbsp;2FA if stored on a separate device, it serves as a backstop to a perpetrator who eg gains access to your password manager on your desktop or gets credentials via keylogger etc.&nbsp;To make resetting credentials hard, something like Google&#039;s advanced protection is exactly what&#039;s needed and it&#039;s the reason Google created it.&nbsp;E.g. if someone by hacking, social engineering or both has sufficient info to enter your account and take your identity - except your second factor, Google&#039;s advanced protection program will make it hard for them to reset it as the process is long and tenuous and involves notifications. Without the advanced protection program but with 2FA switched on, resetting is more streamlined and someone can bypass the second factor more easily.</blockquote>

[QUOTE="notabot, post: 843321, member: 75970"] The point of 2FA is that it's a second authentication factor, it's not to be unable to recover your account, it's not meant to be non-reset-able by the service provider. 2FA if stored on a separate device, it serves as a backstop to a perpetrator who eg gains access to your password manager on your desktop or gets credentials via keylogger etc. To make resetting credentials hard, something like Google's advanced protection is exactly what's needed and it's the reason Google created it. E.g. if someone by hacking, social engineering or both has sufficient info to enter your account and take your identity - except your second factor, Google's advanced protection program will make it hard for them to reset it as the process is long and tenuous and involves notifications. Without the advanced protection program but with 2FA switched on, resetting is more streamlined and someone can bypass the second factor more easily. [/QUOTE]

Verification