| ▲ | sampullman 2 days ago |
| If you don't have the authenticator backup codes and you didn't turn on cloud sync in the app, you might be out of luck. You can get a replacement SIM though and use it with a new phone, so the phone number recovery option should work. |
|
| ▲ | dz0ny 2 days ago | parent | next [-] |
| Happened to me, I was able to get SMS and recovery codes, but Google still required additional verification on now lost phone :D. On the end I acutely found the phone and was able to restore access. So what they do after couple of days of failed attempts the require additional verification, lets call it 3 step. |
| |
| ▲ | cute_boi 2 days ago | parent | next [-] | | I have passkeys, authenticator etc... and everything except phone number, and now i am unable to login my account in other device. Google sucks, they are randomly denying access because their dumb model can't figure out not everyone is trying to steal account. | | | |
| ▲ | kaycey2022 19 hours ago | parent | prev [-] | | This feels objectively worse than writing down a password somewhere |
|
|
| ▲ | uberman 2 days ago | parent | prev [-] |
| This. Can't you get your number moved to a new phone? I have never don't anything magic when upgrading my phone other than move contacts. |
| |
| ▲ | jwr 2 days ago | parent [-] | | How would moving your number to a new phone help? We're talking TOTP here, not SMS "auth". | | |
| ▲ | john_strinlai 2 days ago | parent | next [-] | | does google not offer a backup via sms? it's a common enough recovery flow elsewhere. (i dont use google stuff, so i am genuinely asking) | | |
| ▲ | b112 2 days ago | parent [-] | | Any less secure backup method, means others are less secure. | | |
| ▲ | mrguyorama 2 days ago | parent | next [-] | | Google actually puts effort into security for "normal" people who don't want to earn a PhD in cryptography just to have a damn free email account or watch Mr. Beast That's why they had powerful and effective account takeover protection even 15 years ago. The kind that will prevent the hacker from taking over your account even though they got access to all your factors, because it shouldn't take expertise to know that if you logged in from Oregon twenty minutes ago, you definitely aren't also logging in from Ecuador. Which of course makes it all the more stupid that your credit card company, all your medical service providers, and Facebook don't meet that absurdly low bar. Facebook will happily hand control to the scammer in Laos who got one of your factors and somehow that gave them access to change your password and recovery email | | |
| ▲ | Dylan16807 2 days ago | parent [-] | | The best backup method doesn't need any computer knowledge, it's writing down or printing a few passwords and putting that piece of paper in the same box as your taxes or birth certificate. |
| |
| ▲ | cwillu 2 days ago | parent | prev | next [-] | | A required “more secure” method is less secure if it means you can be locked out by not-exactly-uncommon real-life situations. Denial of service is a security issue. | | |
| ▲ | hedora 2 days ago | parent | next [-] | | I’ve repeated it a hundred times security = confidentiality, integrity and availability. One reason to strongly prefer Apple over Google is that (as I understand it) you can still walk into a store with ID and recover your online identity. | | |
| ▲ | jwr 2 days ago | parent [-] | | > One reason to strongly prefer Apple over Google is that (as I understand it) you can still walk into a store with ID and recover your online identity. Is this true? If so, in what countries? (Poland has no Apple stores, for example, for inexplicable reasons Apple has been giving the middle finger to this market) That would be a huge difference. |
| |
| ▲ | kaycey2022 19 hours ago | parent | prev [-] | | I think Google’s own textbook on SRE has an example in its very first chapter where everyone gets locked out of their bus fleet WiFi thanks to their secure system reaching an unforeseen state |
| |
| ▲ | john_strinlai 2 days ago | parent | prev [-] | | yes, i understand. i was asking specifically whether google has sms recovery flow, not how secure sms recovery flow is compared to other options. |
|
| |
| ▲ | chinathrow 2 days ago | parent | prev [-] | | You can export from Google Authenticator to another device just fine. | | |
| ▲ | jwr 11 hours ago | parent [-] | | How do you export from a phone you no longer have? | | |
|
|
|
