undefined | Better HN

0 pointscryptoz13y ago0 comments

> Because the code is sent to a device Google know you have had physical possession of in the past. It's either sent by SMS, voice call, or to a pre-registered mobile app.

None of those connect to device you've had "physical possession in the past". Only the present. Phone calls, SMS and apps are all portable across hardware.

0 comments

Sidnicious13y ago

At least on iOS, the Google Authenticator app doesn't allow its tokens to be backed up or transferred.

chirayuk13y ago

For TOTP, you can have the same account on more than one device (I do for convenience). All you need is the initial seed which you can either enter manually, or scan the barcode using more than one device.

j / k navigate · click thread line to collapse

0 comments

Sidnicious13y ago

At least on iOS, the Google Authenticator app doesn't allow its tokens to be backed up or transferred.

chirayuk13y ago

j / k navigate · click thread line to collapse

0 pointscryptoz13y ago0 comments

> Because the code is sent to a device Google know you have had physical possession of in the past. It's either sent by SMS, voice call, or to a pre-registered mobile app.

None of those connect to device you've had "physical possession in the past". Only the present. Phone calls, SMS and apps are all portable across hardware.