New phone...how does this 2fucked authentication bullshit work again?

[SpiderWars]

I had an iPotato and went to the passkey app and there was a code. Now I have android and installed an authenticator app but I got nothin.

 

[napalmdeath]

Have to code sent via email.

 

[shar-vell Dan]

$3500 + a kidney & yer first born.
I will never shop or spend my money where i have to "verify" who i am especially when i didn't sign up for anything.

 

[Monkey Man]

Plenty of threads about this in the feedback section.

Here are some of them:

So exactly how does this 2FA work?

2 step authentication

I've activated 2FA and posted more than 50 times, but I still can't reply to sales or trades

F2FA fail

No 2 Step Email

Unable to post in classifieds section despite 2FA and more than 50 posts

Rig talk logs me out non stop and sends confirmation code

... and in the Classifieds section there's this one that aims to answer all questions:

2-Factor Authentication Tutorials & Tips

HTH bro'.

 

[BlueParfait]

TL;DR

2-factor authentication nowadays uses "randomized" numbers calculated based on a seed.

They give you this seed the moment you decide to turn it on, and that seed is what's used to calculated "phrases" (sequences of numbers) that's to be used to unlock your account.

Which means if you have an authenticator on a new phone, you have to transfer the seed you used with the old phone to the new phone. You can't generate this and IIRC most authenticators worth their salt do not backup seeds by default

Which is to say, you should use your iPhone to login, and then you generate a new 2FA binding seed for your profile, and you write this down on pen and paper and you screencap and save the QR on an airgapped thumb drive

Then you use that as the new 2FA seed, so you'll have a backup.

 

[Monkey Man]

Yikes, what newfangled language are you speaking bro'?

Sounds legit; thanks.

Question:
Would it not work if he turned it off in his account and then back on again? Wouldn't it automatically generate a new seed in that case?

 

[rsm]

The problem could be the code is being sent to the old phone account? if so, you can't login to change where the code is sent or to turn off 2FA.

 

[BlueParfait]

Yikes, what newfangled language are you speaking bro'?

Sounds legit; thanks.

Question:
Would it not work if he turned it off in his account and then back on again? Wouldn't it automatically generate a new seed in that case?

That would be how to do it in practice actually

And he should back that seed up offline.

 

[Techdeth]

Have to code sent via email.

I never would an get an email for my code. I was locked out . Idk what’s up with it

 

[Techdeth]

Yikes, what newfangled language are you speaking bro'?

Sounds legit; thanks.

Question:
Would it not work if he turned it off in his account and then back on again? Wouldn't it automatically generate a new seed in that case?

I never would receive the email with my code . You get a new one each time you do it on other sites . Do you just get sent one and needed to have saved it ?

 

[Monkey Man]

I never would receive the email with my code . You get a new one each time you do it on other sites . Do you just get sent one and needed to have saved it ?

You have to make sure you've set your settings to send an email.

That would be how to do it in practice actually

And he should back that seed up offline.

Just as I suspected. I figured it'd clear the cache and replace it.