Commissario
I would use the app and backup alone, as that gives maximum protection (if someone is in your email account then email based 2fa is not going to do much).
**** Please enable 2FA on your OcUK forum account ****
- Thread starter Feek
- Start date
Permabanned
- Joined
- 9 Aug 2008
- Posts
- 35,708
Associate
Thank you, amended my profile to auth app + backup codes.
Soldato
- Joined
- 7 Jan 2009
- Posts
- 6,613
Oh god, I had nothing but issues with the 2FA stuff and that google authenticator rubbish that never worked for me
Permabanned
- Joined
- 9 Aug 2008
- Posts
- 35,708
Oh god, I had nothing but issues with the 2FA stuff and that google authenticator rubbish that never worked for me
What do you mean it never worked?
Ten seconds once a month per device is irritating?
Soldato
Times how many devices you have. I would say tedious as opposed to irritating, I have it enabled as I’d happily do tedious over the hassle of having any account compromised
Soldato
- Joined
- 7 Jan 2009
- Posts
- 6,613
I cant recall what it was now, but i had something else ask me to set up 2FA and use google authenticator, So i did..it was useless, id scan the code and it just wouldn't do anything.
Hopefully this is not the case with overclockers, as id not want to loose MM access due to it not working for me.
It takes less than two seconds with a password manager. Just click the TOTP button to put the correct number into your clipboard (it's the clock on the right, in this case), and then paste the number into the form and you're done.
Soldato
It takes less than two seconds with a password manager. Just click the TOTP button to put the correct number into your clipboard (it's the clock on the right, in this case), and then paste the number into the form and you're done.
To unlock your vault assuming you are using a strong password takes longer than 2 seconds .... On mobile/tablet its just well.. tedious as I said. I'm all for cyber security I touched on it for 6 months in my old job. Original point was it would be better if it was every 60 days or something like that. Convivence and secure is a fine line to balance otherwise you have people not enabling extra layers of security as has been proven in this thread.
You unlock your vault once at the start of browsing, or leave it unlocked but rely on the OS for security (i.e. lock screen, sleep). After that it's instant access. On mobile I click the login button, my face gets scanned in half a second and the number is put in for me - even easier.
Underboss
i didn't realise we could do these now, thanks for the heads up
You should only be asked for your six digit numeric code every 30 days. If you're being prompted more often then you're doing something with cookies.
Soldato
Done. Have Authy installed on my phone for Kraken etc so no big deal adding this to it.
Permabanned
- Joined
- 9 Aug 2008
- Posts
- 35,708
They probably clearing them or using private browsing, or logging in via a vpn that's changing constantly.
How to become a Internet god:
* 2FA or 3FA on everything
* Password generator on everything
* Email forwarding generator on everything
* VPN everything
* Ad block everything
* Encrypt everything
Permabanned
- Joined
- 9 Aug 2008
- Posts
- 35,708
You can be even more of a god by saying "MFA on everything" instead of "FA or 3FA on everything. This covers the people who has more than 2FA enabled accounts.
Soldato
Already had 2FA enabled but thanks for the heads up.