#RESTORE GOOGLE AUTHENTICATOR HOW TO#
#RESTORE GOOGLE AUTHENTICATOR PRO#
#RESTORE GOOGLE AUTHENTICATOR CODE#
#RESTORE GOOGLE AUTHENTICATOR PASSWORD#
#RESTORE GOOGLE AUTHENTICATOR OFFLINE#

Enable one-time password using FortiAuthenticator.Use personal access tokens with two-factor authentication.

#RESTORE GOOGLE AUTHENTICATOR OFFLINE#

If you can get in, you need to adjust your settings to be more secure AFTER you actually have viable, secure, offline backups of the recovery codes. I strongly encourage everyone to have a beer, turn off your phone, and see what accounts you can get into without your 2FA codes. In those cases, you will need to reach out to the service itself and see what you would need to provide in order to get them to turn off 2FA for you or otherwise bypass. There are a few that you will not be able to get into. Or see if there are other access methods, like SSHing in or OAuth where you can set up a new account via a Facebook or Twitter account that uses the same email address as the account you already have, and see if you can sneak in that way. You can also break out that old computer and see if you are still logged in anywhere, and can disable it.

Do you have an old phone that you had Google Authenticator on with some access?įor non-Google accounts, it's pretty easy to restore access in one way or another, either via the above methods or going through the process of bypassing 2FA with your email account.

It basically says 'SAVE THIS NOW, BRO!' Chances are, even if you didn't remember doing it, there is a text document or screenshot somewhere with this necessary information.

Do you have the recovery codes somewhere on your computer? Google (and others) really make it hard for you to blatantly disregard their instructions.

Holy crap, what is that? A freaking security question about your first car, which you've posted about 1000 times on Facebook and Twitter, and wrote your college essay on?! Nice. Instead, go through the process again, this time saying you don't have access to 2FA, email, or phone. Can you do it? Now, if you get that recovery email or text, don't use it yet. If you don't understand why, try to regain access to your Google account right now without 2FA. For the best security, you do NOT want to have a backup email or phone number.

Do you already have a backup phone number or email address set up? Chances are you do because Google incessantly bugs you to set it up.

Are you logged into Google on another device? Can you add a recovery phone number, email address, or turn off 2FA without needing to log in again?.

It isn't inherently insecure, but it was surprisingly easy to regain access to all my accounts even though I had minimal backup codes stored in a multitude of locations over a few years. Most 2FA Is Surprisingly Insecure Due to Usability

#RESTORE GOOGLE AUTHENTICATOR CODE#

Always write it down, set up Google Authenticator from the key you wrote down (not the one on the screen), and then verify via the code that displays on your phone. Whenever you hand write something, best if you do so twice in case you mix something up or accidentally write so messily you can't read it anymore.Do NOT ever store your username, password, and 2FA phrase / QR code / recovery codes in the same location.

#RESTORE GOOGLE AUTHENTICATOR HOW TO#

How to Be Secure While Being Able to Recover Your 2FA

#RESTORE GOOGLE AUTHENTICATOR PRO#

Pro tip: make sure you label what this QR code or text code is (e.g., '2FA for Poloniex'). If you don't have a printer, you can typically click the 'show code' or 'can't read the QR code?' etc., and get a text version that you can then write down. You can also print out the QR code itself that you originally use to add to Google Authenticator, so that if you ever need to reset 2FA, you can do so. Factory reset and ensure it's not able to connect to the WiFi, and turn on airplane mode. Perhaps you can make use of that old, rooted Amazon Kindle or iPhone 5. The other option, which is actually way easier, especially since my phone dies from constantly getting notifications, is to set up your 2FA on two devices whenever you enable 2FA or create a new account. Write them down or print them out and store in 2 physically different locations. Do not save them to your computer or Dropbox. Store these backup codes like you would store a private key. Each of these can be used once in case you do not have access to authenticator. These are typically 10 codes made up of random character sequences like we44 k29d lw0d jwld nels 39ik and so forth. When you created your 2FA sign in with most sites, including Google, they provided you with backup codes. The easiest way is: Save Your Backup Codes! My phone got stuck in boot-loop a ways back so I am intimately familiar with this situation.

Restore google authenticator