Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Since I'm seeing all these comments about people who were happy that Google does this as they lost/damaged their phone which had the only copy of their 2FA codes.

I would recommend buying a couple U2F tokens which support NFC and/or Bluetooth. 1) U2F almost impossible to phish, unlike TOTP codes. 2) You can have multiple U2F keys enabled on Google, so if one fails you have others to use.

I like Yubikeys, though they are more expensive. Yubico makes a "Security Key" which is only U2F. I like the Yubikeys as can also use them to backup TOTP codes and support PGP keys. But realistically a couple U2F tokens is all you need.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: