I Lost My Two-Factor Authentication (2FA) Device. How Do I Sign In?

Рет қаралды 7,468

Күн бұрын

⚠️ Fear of second-factor loss prevents some from using two-factor authentication. There's no need to fear that scenario.
⚠️ Losing your two-factor authentication device
Someone who finds your second factor does not have access to your accounts - they still need your password.
If you’re using SMS two-factor: contact your mobile provider and move your phone number to a new device.
Otherwise: access the account using recovery methods, then remove and re-add two-factor with a new code or device.
Updates, related links, and more discussion: askleo.com/167079
🔔 Subscribe to the Ask Leo! KZfaq channel for more tech videos & answers: go.askleo.com/ytsub
✅ Watch next ▶ Why ANY Two-Factor Is Better than No Two-Factor ▶ • Why ANY Two-Factor Is ...
Chapters
0:00 Lost Two-Factor Authentication
0:55 Two factors means two factors
1:54 Accounts using SMS-based two-factor
3:00 Recovery information
5:00 Then, reboot two-factor
❤️ My best articles: go.askleo.com/best
❤️ My Most Important Article: go.askleo.com/number1
More Ask Leo!
☑️ askleo.com to get your questions answered
☑️ newsletter.askleo.com to subscribe to the Confident Computing newsletter.
☑️ askleo.com/patron to help support Ask Leo!
☑️ askleo.com/all-the-different-... for even more!
#askleo #twofactor #authentication

Пікірлер: 33

@askleonotenboom 5 ай бұрын

Signing in becomes a little more inconvenient. (But only once.)

@JimE6243 5 ай бұрын

Thanks Leo. Now I know why I printed off those number. JimE

@BigA1 5 ай бұрын

Up till now, I've held off using 2FA because of worrying about loss of access. Perhaps now I'll give it a go.

@regisegek4675 5 ай бұрын

I will get 2 hard drives for redundancy though, I have 2 TB nvme too there could be a backup of 2fa seeds too. Although it does sounds mostly, cuz hard drives start to be worth it from 8-10 TB per value/TB basis

@David.M. 5 ай бұрын

Thanks Leo

@fernando4885 5 ай бұрын

That's why I have two cell phones, one just for authentication and the other for everyday use.

@ivok9846 5 ай бұрын

you can add more than one number for verification...on Google

@terrywiggins1736 4 ай бұрын

Leo, great video, can you add a second hardware key as a backup 2FA? If so how do you do it? A possible video on that process would be appreciated.

@askleonotenboom 4 ай бұрын

Typically yes, but exactly how depends on the service. Usually it's a process of just adding 2FA again.

@terrywiggins1736 4 ай бұрын

@@askleonotenboom Thank you!

@gordpope7069 5 ай бұрын

The issue I have found when I use an SMS facility on my phone for 2FA crops up when I travel and use a SIM card from the local country. Now I cannot receive the SMS code request. Yes, I could put my Canada SIM back in my phone for a period of time but the roaming charges for us Canadians are oppressive. When I can, I use an email address for 2FA but it is not always offered. It is now an item on my travel checklist to review what apps and access are critical to my travel (Banks, health, medical, travel sites, etc) and either ensure I have a plan for 2FA backup or turn it off for the trip duration. All that being said, is using an email address for 2FA a bad idea? (Of course, this assumes no 2FA on my email account)

@bassmaiasa1312 5 ай бұрын

I only log into my mail provider on a dedicated machine that's on a dedicated router. I use the mail app on my day-to-day desktop. If I were hospitalized or my house burned down, that's when I would need to actually log in to my provider. The provider put 2FA on my account without asking me, using my recovery e-mail. But the recovery e-mail for my recovery email is my original e-mail. It reminds me of the old song 'Reviewing the Situation' from 'Oliver.' "I think I better think it through again." In an emergency, we'd be logging in from an unknown device, which means the email provider might require a second factor even if we haven't pre-set it.

@DukeNukeThem3D 5 ай бұрын

Hi Leo, quick question: Is it more secure to use sms 2fa together with other types of second fa, like OTP and password, or ditch the 2fa sms completelly?

@askleonotenboom 5 ай бұрын

Generally only one form of 2FA is required.

@DukeNukeThem3D 5 ай бұрын

@@askleonotenboom Thank you Leo. Well i guess otp and hardware solution are better.

@QuantumKurator 5 ай бұрын

If possible, I save my OTP code to my 1password, so I can recreate it on another MFA app if I need to.

@askleonotenboom 5 ай бұрын

1Password can now also act AS your MFA app

@Kie-7077 5 ай бұрын

In reality the whole system breaks because you can't log in to anything to do anything because you're locked out of the other things that enable you to log in, like get your number ported to a new phone - can't, you're locked out etc. Log in to email to get a security email with your pin - can't because you're locked out because you can't 2-factor log in to your email. etc. And this means your whole life can be put on hold for days because you have no phone and your computer access is blocked. This will only get worse as time goes on. This is why when I go on holiday I make sure I'm not using gmail for anything important and am instead using 1-factor on a different email address that always allows me access so long as I remember my password - I can access important stuff without being blocked for days if a phone gets lost or stolen.

@gcolombelli 5 ай бұрын

That's possible, but highly unlikely unless you get into a very unusual/unlucky situation and/or haven't properly planned for recovery.

@regwatson2017 5 ай бұрын

Agreed - Ask Leo makes it sound easy but in reality it is nigh well impossible in some cases.

@bassmaiasa1312 5 ай бұрын

"using 1-factor on a different email address" 1-factor might only work if you login from a known device. Some services won't let you log in from an unknown device without a second factor, even if you haven't set 2FA.

@bassmaiasa1312 5 ай бұрын

@@gcolombelli Highly unlikely? Is a fire or car accident highly unlikely? Is getting mugged highly unlikely? We carry fire insurance, people carry mace or firearms because it happens. This is part of the 'threat model.' At some point in the chain (three layers deep), I accept a weak link in my cyber-security because real world disruptions are more likely than sim swaps or North Korea brute-forcing my master password. I'm not Snowden hiding from the NSA. I need one one-factor password that I can reliably remember but is not easy pickings.

@DanSchallerforPOTUS 5 ай бұрын

I have a recovery email address (That is the 2nd factor, by the way.), but MS refuses to have it as a means to get into my email account and reactivate my access. Their system is trying to force me to provide them with a phone number - That is extortion, in case you're wondering. - instead of just using my recovery address. (It doesn't show it as an option even for getting in.) I have sent a few emails (using other addresses I have) on this subject in which I inform them they need to fix it immediately so I can access my email account. - To date, no response and no action and it has been more than a year.

@yungterp8905 3 ай бұрын

The channel i created in 2006 was one of the first ever channels to be partnered with youtube. It was still in the trial phase. All of my videos are set to private now and i cant login to that account, its ironic how the 2 factor authentication is supposed to make your account more secure, but maybe a little too secure as i may never see those videos again for the rest of my life :(

@yungterp8905 3 ай бұрын

I have an account i created in 2006 that i cant access due to switching service providers on my phone. Sucks because those are some of my best childhood memories, and some of the first guitar tutorials ever posted on youtube. I had a stairway heaven tutorial that had a few million views but i set all the videos to private because i hadnt even hit puberty yet. Was hoping i could show my girlfriend little pre-pubescent me but looks like the account may be lost forever. I wish i could just call somebody but youtube/google is so difficult to contact

@salimmrrushan5googl558 Ай бұрын

Hello Leo, Thanks for very useful information, but my son is in very tricky situation. He cancelled the contract with his phone provider and unfortunately the phone provider completely blocked his number and are not willing to send him sim card with his old number. At the same time his hand set mobile was stolen from him 2 days ago. He bought a new handset but can not get access to all his accounts and apps because they are sending the second verification code to his previous number which he got no access to it now. Would you please advise me what he should do to get access to his account without the second verification code. By the way he remember the password. Your help will be very appreciated 👏 🙏