Comment

Comment on Google requires me to find a "verification code" from my android device in order to log in; the device in question has already been wiped (factory reset).

MicrowavedTea@infosec.pub ⁨1⁩ ⁨day⁩ ago

The most annoying part is you may get this for a previous phone even if you have registered a new phone. If you really want to avoid Google’s forced MFA the best way is to actually enable MFA and generate some airplane codes. Those can generally be used regardless of what Google asks at the time and you can store them offline or even memorize a couple. Probably not as secure but at least you won’t get locked out.

source

Sort:hotnew top

njordomir@lemmy.world ⁨1⁩ ⁨day⁩ ago
This is a good reminder. I recommend everyone grab their takeout data every now and then, but also, print out the 6 codes and put them in a safe deposit box, safe, bury them in a ziplock bag inside of a coffee can in your yard, etc. Hopefully it will be a waste of your time, but if you need them, they’ll be there.

source
Ibaudia@lemmy.world ⁨1⁩ ⁨day⁩ ago
They’re just called “backup codes” now. But yeah.

source
LodeMike@lemmy.today ⁨1⁩ ⁨day⁩ ago
Also, Google will outright not allow you to log in even with all authentication methods if it doesn’t like your IP or browser.

source
JasonDJ@lemmy.zip ⁨1⁩ ⁨day⁩ ago
Airplane codes? Was that an autocorrect for API?

source
- unmagical@lemmy.ml ⁨1⁩ ⁨day⁩ ago
  No. When you enable 2FA Google gives you about 10 backup codes that will always work regardless of if you have access to your authenticator app.
  
  source
- MicrowavedTea@infosec.pub ⁨1⁩ ⁨day⁩ ago
  Apparently they’re called backup codes now. I could swear they used to be called airplane codes (because they’re offline ig). It’s just some randomly generated 8-digit codes.
  
  source
LodeMike@lemmy.today ⁨1⁩ ⁨day⁩ ago
You can’t enable MFA without a phone number or a mobile device.

source