Or even an account for that matter
You must log in or register to comment.
Passkeys plz
I had a really fun one with my Google account the other day. It was the one where you had to select the number it was showing on “the other screen”. However it was trying to show it on my same phone I was trying to log in on, only to immediately overwrite it with the prompt to select the correct number. Cue me sitting there having to guess the right number like 6 times before finally getting access, getting logged back out every time I failed to guess right
This, but specifically because of Microsoft Authenticator. I hate this app so damn much. [I’m forced to use it] not with TOTP tokens, but push-notification based ones which arrive only sometimes and are slow. And then it’s mocking me saying “pull to refresh if you don’t see a notification”, but there is no pull to refresh feature. Oh and Microsoft Azure Portal? It asks you to authenticate twice in a row, just to be sure. Burn burn burn
I tried MS Authenticator after creating a business account with me as the admin, and it let me enroll and then immediately gave me a device untrusted error (I’m rooted, sue me, but there’s no warning or way to tell that’s not allowed) which then login-looped every recovery option to try to re-enroll or remove the 2FA, requiring me to file a ticket and manually prove who I am which took 48-hours.
Just the fact that they let me sign up before pulling the rug and revoking access with a hidden, time-bomb fail condition, really impressed me. It takes work to be that evil.
Only for its “cloud saves” to suddenly forget everything after switching devices 🤦♀️️ I’d upvote 3 times if i could
Some companies let you use TOTP instead of the app, look in the dashboard and select the verification mode that gives you the qr code
Things that I have 2FA for for some reason:
- my abandoned Ubisoft account which holds two free games and doesn’t have any personal details about me
Things I don’t have 2FA for, although I’d probably prefer if I could have:
- my bank account
No, you see banks don’t need 2fa because they’ve got ironclad password requirements like “max of 8 characters, alphanumeric only”.
My bank doesn’t allow copy+paste into the new password fields, and clears anything you’ve typed if you switch apps.
To set a new password (which is mandatory every 6mo) I have to physically write down the new password that my password manager generates…
Your bank lets you use letters? Mine just numbers. The registration allowed 10 numbers but the login does not allowed more than 8… At least they block the account after 3 incorrect guess and make you ask for a reset in person. So I had to go twice in a day… and the teller lady asked why I don’t use 4 digits like a normal person… Sill beter than the other bank which sends the password back in plain text email after registration in 2019
My bank allows alphanumeric passwords, but only 5 characters
I sometimes wonder how their opsec specialists cope…
But some of them don’t tell you that when you first set it, so you have to call tech support and, after sending you a temporary password to log in and set a new password which then also doesn’t work, they’re like “wait, you can’t have & or ! in the password — try it without,” and it works because it accepted the password but removed all special characters without telling you 🙃
I store 2FA in the same place I store my password, I just need to copy one, then the other. I may have lost hours or even days to 2FA, the same amount I lose by having to authenticate with a password
For some reason I read it as “I lost the love of my life to two factor authentication” and really wanted to hear how that was possible.
heyy cutie, can I get your number? can you give me the code i sent to your phone number, hot stuff? you’re adorbs, is this still a good email to reach you with?
Long distance relationship, locked out of email, can’t remember their email address 🥀
SoCal Edison just enabled 2fa? To protect what, exactly? Someone hack my account and pay my bill!
My utility account shows power use by 15 minute intervals. Technically someone could use that as a way of figuring out when people are home or away if you have a regular life schedule. Seems like a farfetched concern though.
Always had the same reaction to requiring a PIN to refund a transaction on an EFTPOS machine. Someone wants to steal my card and put money on it that’s cool, just stop them from taking it out and they can hold onto that card as long as they want.
IMO anything hooked up to your financial info should have 2FA
