Your Backup codes - Important

Feek said:
I wish I knew what it would take to get people to save their codes.
Click to expand...
Perminant loss of their accounts. Problem is they will just sign up again with a new account causing the same issue.

Feek said:
The crazy thing is that it doesn't just affect them logging in here, they'll have lost access to every single site they access with 2FA.
Click to expand...

You are assuming people use 2fa on all sites.
 
Feek said:
I wish I knew what it would take to get people to save their codes. Despite that huge announcement that we regularly reset to force it to show again, I still get a minimum of four requests a week to disable 2FA because members have changed phones, lost phones, lost their authenticator app etc.

The crazy thing is that it doesn't just affect them logging in here, they'll have lost access to every single site they access with 2FA.
Click to expand...

It's an internet forum, most don't use 2fa because a forum account is simply not that important.
 
If you've linked your OCUK store account with your forum account to get free postage couldn't someone use your stored payment details to order a load of stuff? I genuinely don't know is why I'm asking.
 
Murphy said:
If you've linked your OCUK store account with your forum account to get free postage couldn't someone use your stored payment details to order a load of stuff? I genuinely don't know is why I'm asking.
Click to expand...

That's why you do NEVER store payment details. Convenience over security.

Websites should NOT allow card details to be stored IMO. Should be law.
 
Last edited:
I can see from the support emails that there have been FOUR more instances already this week where people haven't saved their backup codes, have changed phones and lost their 2FA. It's only Wednesday.

For goodness sake, save the damn codes!
 
Feek said:
I can see from the support emails that there have been FOUR more instances already this week where people haven't saved their backup codes, have changed phones and lost their 2FA. It's only Wednesday.

For goodness sake, save the damn codes!
Click to expand...

People probably save their backup codes to their phone...
 
Another +1 for @Feek for helping me to get back online here yesterday.

I read the thread (yellow-stickied at the top) and thought I had the codes, but sadly I saved them to a phone that I no longer had due to a recent phone upgrade. I wrongly assumed that the credentials would copy over when using Samsung Smart Switch. Weirdly enough, my Microsoft authenticator did copy over ok but the Google one didn't, which was the one that contained my OcUK code. At least I know now, and will endeavour to behave better next time :p
 
Google Authenticator now backs up your 2FA authentication codes so if you are using that app, your details will be transferred when you change device etc.

That's assuming you trust google with that sort of information.
 
Feek said:
Google Authenticator now backs up your 2FA authentication codes so if you are using that app, your details will be transferred when you change device etc.
Click to expand...
It does? I’m not seeing anything in my app (iPhone 13) :confused: How do you turn this on?

Also, serious question.. where does one save your backup codes? I have 19 accounts/codes in Google Auth and a total mish mash of having saved some, not others etc. in varying locations. Do people chuck them in Google Keep or something and hope that their Google main account doesn’t get compromised? Or literally print them out? What is actually recommended?
 
Last edited:
Scam said:
where does one save your backup codes? I have 19 accounts/codes in Google Auth and a total mish mash of having saved some, not others etc. in varying locations. Do people chuck them in Google Keep or something and hope that their Google main account doesn’t get compromised? Or literally print them out? What is actually recommended?
Click to expand...
I save them as notes against each account in 1Password. I would hope that most password managers have an option for notes against each account so it seems the logical place.

Scam said:
It does? I’m not seeing anything in my app (iPhone 13) :confused: How do you turn this on?
Click to expand...
Dunno, I don't use it, even though I have it installed. The patch notes from the most recent version from a few hours ago say:
  • Cloud syncing: Your Authenticator codes can now be synced to your Google Account and across your devices, so you can always access them even if you lose your phone.
 
Feek said:
I save them as notes against each account in 1Password. I would hope that most password managers have an option for notes against each account so it seems the logical place.
Click to expand...
Hmn I dont use any password managers. I think this is probably why a lot of people don't save their backup codes - because it's an additional risk having them accessible somewhere!
Feek said:
The patch notes from the most recent version from a few hours ago say:
  • Cloud syncing: Your Authenticator codes can now be synced to your Google Account and across your devices, so you can always access them even if you lose your phone.
Click to expand...
Ah, stupid Apple. I had to force an update in the app store. I got a splash screen when I re-launched Google Auth asking me to sign into my Google account. Coming from someone who manages a system with MFA turned on - finally !! :rolleyes:
 
Last edited:
Only semi-related to the thread, but I just had to re-authenticate my desktop on the forums and my code was ****** :cry:
Nice!! Thought I'd share :)
 
Last edited by a moderator:
alphaomega16 said:
Can you not redownload backup codes?

Don't use my phone for browsing, im on payg.
Click to expand...

Yes if you go to:
Your Account >Password and Security> There should be a Two-step verification option
Click Change, then there should be a manage button next to backup codes.
(It asks you to enter your password at some point)

Once you get to that page it shows your current set of backup codes (including those that have been used), and gives you an option to generate a new set
 
The phone I have MS Authenticator took a swim, and is on its last legs. I have my backup codes. How do I set up OcUK on MS Authenticator again. I've forgotten.
 
You must log in or register to reply here.
Back
Top Bottom