{"id":760951,"date":"2020-05-27T07:15:43","date_gmt":"2020-05-27T11:15:43","guid":{"rendered":"https:\/\/www.prime-wow.com\/?p=760951"},"modified":"2020-05-27T07:15:43","modified_gmt":"2020-05-27T11:15:43","slug":"choosing-2fa-authenticator-apps-can-be-hard-ars-did-it-so-you-dont-have-to","status":"publish","type":"post","link":"https:\/\/www.prime-wow.com\/?p=760951","title":{"rendered":"Choosing 2FA authenticator apps can be hard. Ars did it so you don\u2019t have to"},"content":{"rendered":"<div id=\"rss-wrap\">\n<figure class=\"intro-image intro-left\"><img decoding=\"async\" src=\"https:\/\/www.prime-wow.com\/wp-content\/uploads\/2020\/05\/2fa-hands-800x450-1.jpg\" alt=\"Choosing 2FA authenticator apps can be hard. Ars did it so you don&#x2019;t have to\" \/><\/p>\n<p class=\"caption\" style=\"font-size:0.8em\"><a href=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2020\/05\/2fa-hands.jpg\" class=\"enlarge-link\" data-height=\"563\" data-width=\"1000\">Enlarge<\/a> (credit: Aurich &amp; Hannah Lawson)<\/p>\n<\/figure>\n<div><a name=\"page-1\" \/><\/div>\n<p>Last year, Sergio Caltagirone found himself in a tough spot. While traveling, his phone broke and stopped working completely. With no access to his Google and Microsoft authenticator apps, he lost access to two-factor authentication when he needed it most\u2014when he was logging in from IP addresses not recognized by the 30 to 40 sites he had enrolled.<\/p>\n<p>\u201cI had a whole bunch of sites [that] I had to go through a massively long account restoration process because I lost my 2FA,\u201d said Caltagirone, who is senior VP of threat intelligence at security firm Dragos. \u201cEvery time, I had to contact customer service. I had different levels of requirements I had to go through for them to effectively disable 2FA on my account. Some required address verification. [For others,] I had to send a last bill. The number of those I went through was just insane.\u201d<\/p>\n<h2>Thin blades<\/h2>\n<p>The experience shows the double-edged sword of multi-factor authentication. Requiring users to enter a password that\u2019s pseudorandomly generated every 30 seconds makes account takeovers significantly harder, even when an attacker has phished or otherwise obtained the password. But in the event that second factor (in this case, the \u201csomething you have,\u201d that is, the phone) isn\u2019t available, that same protection can block legitimate users from logging in for unacceptably long periods of time.<\/p>\n<\/div>\n<p><a href=\"https:\/\/arstechnica.com\/?p=1677995#p3\">Read 43 remaining paragraphs<\/a> | <a href=\"https:\/\/arstechnica.com\/?p=1677995&amp;comments=1\">Comments<\/a><\/p>\n<div class=\"feedflare\">\n<a href=\"http:\/\/feeds.arstechnica.com\/~ff\/arstechnica\/index?a=YlO6DQ5GExQ:dZBvH6XTZ3A:V_sGLiPBpWU\"><img decoding=\"async\" src=\"\" border=\"0\" \/><\/a> <a href=\"http:\/\/feeds.arstechnica.com\/~ff\/arstechnica\/index?a=YlO6DQ5GExQ:dZBvH6XTZ3A:F7zBnMyn0Lo\"><img decoding=\"async\" src=\"\" border=\"0\" \/><\/a> <a href=\"http:\/\/feeds.arstechnica.com\/~ff\/arstechnica\/index?a=YlO6DQ5GExQ:dZBvH6XTZ3A:qj6IDK7rITs\"><img decoding=\"async\" src=\"\" border=\"0\" \/><\/a> <a href=\"http:\/\/feeds.arstechnica.com\/~ff\/arstechnica\/index?a=YlO6DQ5GExQ:dZBvH6XTZ3A:yIl2AUoC8zA\"><img decoding=\"async\" src=\"\" border=\"0\" \/><\/a>\n<\/div>\n<p>&#013;<br \/>\n&#013;<br \/>\nSource: Ars Technica &#8211; <a href=\"https:\/\/arstechnica.com\/?p=1677995\" target=\"_blank\" rel=\"noopener noreferrer\">Choosing 2FA authenticator apps can be hard. Ars did it so you don\u2019t have to<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enlarge (credit: Aurich &amp; Hannah Lawson) Last year, Sergio Caltagirone found himself in a tough spot. While traveling, his phone broke and stopped working completely. With no access to his Google and Microsoft authenticator apps, he lost access to two-factor &hellip; <a href=\"https:\/\/www.prime-wow.com\/?p=760951\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":760952,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[27,110],"tags":[73],"class_list":["post-760951","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ars-technica","category-unfiltered-rss","tag-ars-technica"],"_links":{"self":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/760951","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=760951"}],"version-history":[{"count":0,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/760951\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/media\/760952"}],"wp:attachment":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=760951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=760951"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=760951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}