• rumschlumpel@feddit.org
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    1
    ·
    edit-2
    2 days ago

    I’d be more inclined to use 2FA if the second factor wasn’t usually a mobile phone, which can easily (much more easily than a laptop or desktop pc) be lost, be stolen or break, is harder to repair, and generally running software that is far more insecure than what is running on my PCs, especially if you get into the specifics of how that 2FA works - SMS isn’t secure, and authenticator apps generally require the official app store (Google or Apple), i.e. they don’t work well on something like LineageOS or GrapheneOS.

    You can probably use something like Yubikey or a more privacy-friendly authenticator app on Github, but many other services won’t give options like that.

    • MoonMelon@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 day ago

      I keep thinking I should get a hardware key but then the cost, potential incompatibility, and my own confusion over all the options always stops me. But I have also had phones just randomly not turn on one day, so the current solution is a file folder full of OTPs. Sucks.

      • faintwhenfree@lemmus.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 days ago

        Aegis also let’s you be power user, you can share your 2fa generators with other people, I’ve been needing independent way to access many accounts with a family member and aegis makes it the easiest.