[CAS_M] Reported Post by Soul Rich

Soul Rich · Oct 12, 2014

Soul Rich has reported a post.

Reason:

No answer on this suggestion for over 4 months, should be moved to denied section.
Click to expand...

Post: 2 Factor Authentication Suggestion
Forum: Suggestions
Assigned Moderators: Cas_M

Posted by: Grave
Original Content:

Could you possibly let users also leave a phone number that can be used for manual verification in the event that they lose access to their code?

Because writing down the backup code isn't fool-proof.
I've already lost the paper for mine, and I'm not good at keeping track of things, so I will most likely lose it time and time again throughout the years.
Plus, a lot of people will probably not WRITE this down and save it in a file on their computer, which can be ratted, which means hackers can still access the account with the backup key, which defeats the purpose. Giving users a chance to fuck up their 2 factor (I know, I know, they should write it down as suggested but not everyone does) isn't safe.

However, I've kept my phone number for over 10 years now.
And an administrator can just use Google Voice to send you a verification text message in the event that you do lose your 2 factor, and that can be the alternative second factor in manual verification.

Of course, I'm Sythe verified so I'm not screwed, but other people may be.
Just a phone field. It shouldn't be hard and it'll really help.
Click to expand...