"2-Step Verification" - Okay Google, That's Great, But What If...

[Selta]

2FA is a good thing to have. If you use something like Twilio Authy (free and easy to setup and use), it doesn't matter what you do to your physical phones or phone accounts.

 

[DirtDog]

If you are using the Google authenticator (the one that looks like a grey dial) tap the ... next to 'Search for accounts' and select 'export accounts'.

Then, scan the QR code with the new app after tapping the plus in the bottom right corner and 'Scan a QR code'.

Unfortunately that's the only one I use that's not service-specific so I don't have any experience otherwise but if you have a specific one I might be able to figure it out.

No, it’s the MS one…for Teams. After a panic this afternoon while I was about to host a telecon, I’ve gotten closer to a diagnosis. Seems that Teams doesn’t work so well if you organize a meeting on, say, the work laptop and try to log into that meeting with another machine (say, a personal device) even with the user credentials. So maybe a UX issue, not 2FA. But the MS Teams 2FA solution doesn’t seem to want to work under those same conditions. Might be my employers deployment of O365, might be an MS problem. I dunno. All I know is that it’s the weekend and I’m not going to worry about it until Monday AM!

 

[Selta]

No, it’s the MS one…for Teams. After a panic this afternoon while I was about to host a telecon, I’ve gotten closer to a diagnosis. Seems that Teams doesn’t work so well if you organize a meeting on, say, the work laptop and try to log into that meeting with another machine (say, a personal device) even with the user credentials. So maybe a UX issue, not 2FA. But the MS Teams 2FA solution doesn’t seem to want to work under those same conditions. Might be my employers deployment of O365, might be an MS problem. I dunno. All I know is that it’s the weekend and I’m not going to worry about it until Monday AM!

Likely an access issue if I had to guess. Most "work laptops" will be joined to an domain of some sort, and accessing domain resources from non-domain joined machines can be limited or prohibited. Where I work, to access anything internal I have to be on a domain machine at the very least - just having user, pass, and 2FA won't get you anywhere.

 

[Beef_Wallington]

No, it’s the MS one…for Teams. After a panic this afternoon while I was about to host a telecon, I’ve gotten closer to a diagnosis. Seems that Teams doesn’t work so well if you organize a meeting on, say, the work laptop and try to log into that meeting with another machine (say, a personal device) even with the user credentials. So maybe a UX issue, not 2FA. But the MS Teams 2FA solution doesn’t seem to want to work under those same conditions. Might be my employers deployment of O365, might be an MS problem. I dunno. All I know is that it’s the weekend and I’m not going to worry about it until Monday AM!

Good call on waiting for Monday!

I can't say I've had any issues with Teams on multiple devices, sometimes even switching from phone to computer on the same meeting, but we also don't currently have 2FA in my workplace. I can say that we've seen some odd stuff from Teams in the past so you might be onto it about the deployment or a MS issue.

 

[Gorn]

After enable two factor authentication for talkbass earlier today, it just made me enter a code from email. It wasn’t easy, what with opening the email, and looking at the code, and entering the code, but I made it. I survived.

 

[LBS-bass]

I'm still completely baffled by those who still don't have a smart phone by choice. Yes, they can be a time suck, but if you don't use social media apps, the time suck decreases drastically. I can't imagine living without it for GPS, email, weather, music, etc. And I work for a tech company, where it's practically required.

Same. It's not expensive, it's not a requirement that you stare at it every minute of every day- I hate typing on a phone so I don't use it much for this sort of thing. But for the convenience of having a map to anywhere and a universe worth of information at my fingertips, I can't really imagine why someone wouldn't want one.

There are those, however, who take pride in remaining old-school about things. Way before smart phones there were plain old cell phones, and my ex just couldn't bring himself to get on board with that. It was a smug little bit of "I ain't getting with the trendy program" right up until the day he broke down two hours away from home and discovered pay phones weren't a thing anymore.

 

[Beef_Wallington]

After enable two factor authentication for talkbass earlier today, it just made me enter a code from email. It wasn’t easy, what with opening the email, and looking at the code, and entering the code, but I made it. I survived.

Thank you for sharing your story, you are truly a brave soul

 

[Gorn]

Thank you for sharing your story, you are truly a brave soul

I just hope my story can inspire others to be strong.

 

[LBS-bass]

What part of this requires a smart phone? You just need to keep the same number and they text confirmation codes etc. If you had any computer with email access and any mobile phone you should be able to this. Perhaps there are other authentication factors I have not turned on that use a smart phone (biometrics is about all I can think of currently).

Some of them require use of an app like Authenticator.

 

[Alkali Ike]

When enabling 2FA for TB, selecting the Authy app gives a 404 error. Bug reported.

 

[Selta]

Funny enough, TB is one of the few sites I don't have 2FA on by choice. If this account gets compromised, it's because TB gets compromised (email/pass isn't shared anywhere else), and, getting banned or otherwise shut out of TB would truly only be doing me a favor .

 

[sleddogn]

Zero interest for a smart phone here. I'm 52 and a carpenter. I've seen many many k's worth of phones at work get destroyed. Watched one slide down the roof and off to driveway (2.5 story drop) bam. My rugged flip phone survives everything i do to it. I don't need gps, email etc during work day. I get all that at home on cpu before i leave and after i get home. I also have zombie finger tips that won't work a screen very easily. So those are my reasons for no interest, i know i'm odd, but not everyone needs a smart phone to survive....

 

[Gorn]

Zero interest for a smart phone here. I'm 52 and a carpenter. I've seen many many k's worth of phones at work get destroyed. Watched one slide down the roof and off to driveway (2.5 story drop) bam. My rugged flip phone survives everything i do to it. I don't need gps, email etc during work day. I get all that at home on cpu before i leave and after i get home. I also have zombie finger tips that won't work a screen very easily. So those are my reasons for no interest, i know i'm odd, but not everyone needs a smart phone to survive....

If someone isn’t careful with their property it’s not really the property’s fault. I know guys that do physical labor for a living and there phones have cases appropriate for the situation. But no one says you have to have one if you don’t want one. I don’t need mine. I don’t need a car. I don’t need a tv. I’m fortunate to be able to have things I want. My phone is a luxury.

 

[gln1955]

After enable two factor authentication for talkbass earlier today, it just made me enter a code from email. It wasn’t easy, what with opening the email, and looking at the code, and entering the code, but I made it. I survived.

Why would you do that?

 

[sleddogn]

LOL, its all good for everyones own situation. I do need a car, and i do need tv, but not the phone. I'm not trying to convince a single person to not use one, but sure feel others are trying to convince me i'm wrong, lol

 

[ElectroVibe]

It first struck me around 2009. I was driving from work to a garage and had forgotten my phone. But it was a fairly busy commercial route. But.....I was shocked when I realized that there really weren't many places I could have stopped and used a phone, if any at all. And it was a 10 mile stretch through a big city.

 

[Gorn]

Why would you do that?

I did it for every account I could think of. Why not?

 

[ElectroVibe]

I have a job that literally requires a phone app verification, periodically.

 

[HubbardsFate]

What part of this requires a smart phone? You just need to keep the same number and they text confirmation codes etc. If you had any computer with email access and any mobile phone you should be able to this. Perhaps there are other authentication factors I have not turned on that use a smart phone (biometrics is about all I can think of currently).

I don't know about anyone else's experience with (specifically) Google's 2FA, but for me what happens is that a text gets sent to my phone that says "Please verify it was you trying to sign in to your account", and then there is the choice of tapping "No, it's not" or "Yes, it's me." They don't send me a code or number that I can just keep on hand to use over and over.

Like others here, I'm all for heightened security, but I'll go back to my main point, which is, what if I lose my phone, or it goes belly-up, or I just plain don't WANT a smartphone a year or two from now? Because as far as I can tell, the only way for me to use 2FA with Google is to own/have possession of a smartphone for the rest of my life. - If I am wrong on that, someone correct me...

 

[gln1955]

I did it for every account I could think of. Why not?

Extra step to sign in to something. What could anyone do with my TB account that has any serious ramifications? OK...get me banned, I guess.

I have a job that literally requires a phone app verification, periodically.

I work in a university. One by one, the systems are all going to an app-based verification. It all needs to be secure I guess, but if my phone goes down, it's a PITA.