104
I hate 2FA Hell
(hexbear.net)
On the road to fully automated luxury gay space communism.
Spreading Linux propaganda since 2020
Rules:
Where possible, I add as many factors as I can to the 2fa process, so when I'm logging into something, I can choose between either a notification to my phone, TOTP which I have stored on multiple devices, or a physical security key.
If I lose any of them, it doesn't prevent me from accessing my accounts, nor will I have to worry about anything being compromised as whoever finds my phone, or my USB key would also have to know both that it belongs to me, and what my passwords are... Which unless I'm being specifically targeted, is highly unlikely.