2 factor authentication fears (passwords, cell phone, email, signal)

[ncole1]

So many people are supporting 2 factor authentication for virtually everything, but this concerns me for several reasons. Number 1 is that I don’t want to become an effectively undocumented citizen if I lose my phone, unable to access basically anything. But also, if I switch phones, I feel like I have to keep the old phone for a year because it simply isn’t possible to remember every single thing I have a login account for, if I try to change everything there is a near 100% chance I will forget something and then face a huge hassle trying to get in. Finally, it can cause serious problems in an emergency if I am unable to charge my phone, keep it with me, or get a signal. Why does it seem like no one else has considered these issues?

[LesLucid]

I have 2 factor authentication on most of my accounts. Not sure how yours works but on mine, if I place an internet or foreign country order with my credit card, it says it’s going to send an authentication code to my phone number ending in xxxx. I get a text on my phone, enter it on the first message and the transaction goes through. Pretty easy.

I’ve never lost a phone and if I did, I’d keep my number on the replacement so not much would change. I’m much more worried about people stealing my CC info than 2 factor authentication.

[macroy]

Originally Posted by ncole1

So many people are supporting 2 factor authentication for virtually everything, but this concerns me for several reasons. Number 1 is that I don’t want to become an effectively undocumented citizen if I lose my phone, unable to access basically anything. But also, if I switch phones, I feel like I have to keep the old phone for a year because it simply isn’t possible to remember every single thing I have a login account for, if I try to change everything there is a near 100% chance I will forget something and then face a huge hassle trying to get in. Finally, it can cause serious problems in an emergency if I am unable to charge my phone, keep it with me, or get a signal. Why does it seem like no one else has considered these issues?

IMO - you're overthinking this.

For the most part, MFA capabilities usually allows for multiple avenues (more than 1 number, more than 1 email, or a combination of). But again, if these weren't setup - you can always reset the function or call the provider. Yes it may be 'inconvenient' - but I would argue that in such a scenario, it would be more the result of bad planning or just bad luck vs. a company being shortsighted.

As for managing passwords and accounts - consider using a password manager like lastpass, keepass, etc.

[rjshae]

Economically we don't really have much choice in this; single-factor authentication is becoming too easy to crack. What they usually do is have a secondary process to validate your identity, in case the first becomes broken.

[KCZ]

I've dealt with a few companies that insisted on 2FA and only provided for the second factor to be a text to a cell phone, which was unworkable for me because I live in an area with spotty, at best, cell service. I had to change my accounts to other companies that either let me opt out of 2FA or use an Email instead of text. I'm still dealing with one company that insists on sending a text to my landline, after which I can call them and tell them to send a voice-generated code to my landline.