Why does nobody ever talk about 2FA backup codes?

I set up two factor on my email account a couple years ago and thought I was all set. Then my phone got water damaged on a job site last month and I was totally locked out. It took me 3 days to get back in because I never saved those backup codes they gave me. Has anyone else run into this and found a good way to store them safe?

2 comments

2 Comments

webb.jordan1mo ago

Storing backup codes is just asking for someone to find them. Better to just not use 2FA at all and keep your password something no hacker would ever guess.

coleman.jade1mo ago

Honestly, I gotta push back on this a little, @webb.jordan. Are people really gonna dig through your toolbox or your nightstand for a slip of paper with backup codes? Most folks just toss them in a drawer and forget about them, which is basically the same as not having them. I get the fear of someone finding them, but that’s way less likely than getting locked out because your phone died or you lost it. Ngl, a strong password alone isn’t cutting it anymore, not with how easy it is for hackers to guess simple ones or use those data leaks. Tbh, just hide the codes somewhere boring like a book or an old envelope and you’re fine.