2-Factor Authentication | Bitcointalksearch.org

monsanto

legendary

Activity: 1241

Merit: 1005

..like bright metal on a sullen ground.

Quote from: Yana_M1 on September 07, 2018, 05:33:10 AM

Quote from: supporterb on September 05, 2018, 10:25:03 AM

Still I'm using google 2fa authentication without any problems. It is very important to save 16 digit code on a paper. Cause if we lost it then I think there have no way to reset account.

That's wright! Why nobody told me that at the beginning? Btw anybody know how to recover that code if you didn't wrote it?

There's no recovery with Google Authenticator without the QR code or characters of the 2fa seed (Authy app has backup option though). If Authenticator is used for a site like an exchange, and you still have working 2fa, you can go in and disable & re-enable 2fa to get a new 2fa seed, which you can then save.

Yana_M1

full member

Activity: 350

Merit: 100

Quote from: supporterb on September 05, 2018, 10:25:03 AM

Still I'm using google 2fa authentication without any problems. It is very important to save 16 digit code on a paper. Cause if we lost it then I think there have no way to reset account.

That's wright! Why nobody told me that at the beginning? Btw anybody know how to recover that code if you didn't wrote it?

supporterb

jr. member

Activity: 78

Merit: 1

Still I'm using google 2fa authentication without any problems. It is very important to save 16 digit code on a paper. Cause if we lost it then I think there have no way to reset account.

NUnuasod

newbie

Activity: 170

Merit: 0

I didn't meet any problem using 2-Factor Authentication but my friend had. His Binance account was hacked and all his money on Binance gone, he installed Binance 2FA only on his mobile and he didn't store back up phrase on computer.

pksingh

member

Activity: 218

Merit: 10

BCT Manager

Quote from: botany on January 13, 2018, 06:28:34 AM

Is there any loss of privacy while using 2 Factor authentication?
If you use Google Authenticator on an android phone (where essentially you have linked your google id), to authenticate the login of a third party website, can google link your google id with the credentials of the third party website?

This thing is making crypto safer https://medium.com/@tim_coin/inviting-bids-for-geonode-infrastructure-program-by-solyd-bctclabs-97f4d651c355

Private keys are weakest link in crypto lifecycle. Once gone, it's gone. Either by loss, hack or destruction.
Geonodes will make wallets which can have customisable level of security instead of private keys. There are no keys and neither anything is stored in any database. It is hot wallet protected by geofencing of smart contracts.
Read article of telecoms coming to play a bigger role for this here.

becklyn06

newbie

Activity: 79

Merit: 0

There is no loss of privacy while using 2 Factor authentication.
Google Authenticator is as safe as can be and one of the best security mesures available.
Though it is advicesable to save up the code somewhere else incase you lose you device and still want to log in.

yohananaomi

sr. member

Activity: 2422

Merit: 267

Hire Bitcointalk Camp. Manager @ r7promotions.com

Quote from: hotimbineh on August 11, 2018, 11:38:55 AM

Quote from: Malooka on August 11, 2018, 08:49:20 AM

Now a days 2-Factor Authentication is the most effective security system we can use is in our crypto exchangers and also wallets it's really safe for us.

and every exchange and wallet has been synchronized with 2FA only we need to activate it except MEW, still can't

Absolutely agree that 2-Factor Authentication is very helpful and true that for now is a security that is very necessary for the transactions that we will do and are needed.

BestSSS

jr. member

Activity: 434

Merit: 4

Do not doubt the safety of 2-FA-this system is very reliable, but do not forget to take care of your safety. Always save the 2-FA code in Notepad or on a computer file as this is your state. Your mobile device at any time can break or get lost and there are great difficulties .

Angel Di

sr. member

Activity: 588

Merit: 251

EVOS

This is definitely a very good 2-Factor Authentication app for Internet users. Today it is very effective to protect your accounts, and indeed anything. There are of course and other methods, but this very good.

Bitchef2112

jr. member

Activity: 61

Merit: 1

There shouldn't be any loss of privacy... but i don't trust google at all. Try getting a 3rd party 2fa that'll be widely accepted.

aLLvaro20

jr. member

Activity: 115

Merit: 1

Google authenticator is used most often to tighten the security of your account, I'm not sure if companies like Google will risk their reputation to be destroyed in an instant by violating your privacy. So far, I have not had a problem with 2-step verification, whether it's an account thief or an account breaker..
What I experienced was only the difficulty of the process / mechanism of entering a password but I still had to enter the 6-digit code that entered your cellphone. but that is a consequence if we want to provide extra security for our account..

cokroalif

member

Activity: 434

Merit: 10

in my opinion, the Google Authenticator is very safe to use even though it belongs to Google because when you scan the barcode code is incorrect, it cannot be estimated, but it cannot be used as a benchmark for 100 safe

hotimbineh

full member

Activity: 560

Merit: 100

Quote from: Malooka on August 11, 2018, 08:49:20 AM

Now a days 2-Factor Authentication is the most effective security system we can use is in our crypto exchangers and also wallets it's really safe for us.

and every exchange and wallet has been synchronized with 2FA only we need to activate it except MEW, still can't

Malooka

copper member

Activity: 289

Merit: 254

Now a days 2-Factor Authentication is the most effective security system we can use is in our crypto exchangers and also wallets it's really safe for us.

gayan7788

jr. member

Activity: 190

Merit: 1

i all account is 2fa active ,my friend account is hack next week not 2fa ,safe all account is 2fa

dark1234

full member

Activity: 1134

Merit: 167

as 2-FA authentication performance. is one of the second application security features
so we don't need to worry if the word cellphone is damaged or lost because we still have the main password for the application that we use and we can also fix 2-FA authentication

Voltar

jr. member

Activity: 63

Merit: 2

Isn't that what the HYDRO app is for? I mean I know it is supposed to be a new and improved version but has anyone tried it?

coloredcoin

full member

Activity: 199

Merit: 101

Possible a decentralized two-step authentication?

acetouryahey

member

Activity: 213

Merit: 10

I think no, but as long you didn't give the 16 digit code to anyone they can have another authentication. Keep it on the right place that you only knows because if your device is destroyed or gone you can have another authentication to open you account.

daviost

jr. member

Activity: 196

Merit: 2

I always double save the 2-FA authentication.

cause it's hard to restore it again if your smartphone is broken or stolen by others.

so my suggestion is you must save it 2 times. by paper and on your smartphone. cause it doesn't have a backup feature right now.

DefDope66

jr. member

Activity: 38

Merit: 2

If there is an alternative to a Google product, that's the route I'll take every time. Google does not respect your privacy and they have a strong bias against crypto.

sergiokkl

member

Activity: 258

Merit: 10

I guess no, Google aunthenticator have one use and it's security of our personal Google account. Work to avoid any attack from hackers. In case to know the password the account will still safe and can't change pass no matter what. Just keep the code to not access by anyone the Google authentic codes

ompoetra

jr. member

Activity: 154

Merit: 1

The function of Two Factor Authentication or 2FA, is to provide double security against the account of the users of social networking. Some social media services already implement this way to provide a sense of security to its users, such as Facebook, Instagram, Snapchat and Twitter.
Other online based services apparently also do not want to miss, Google, Amazon, Microsoft, DropBox, WhatsApp, and Paypal also apply Two Factor Authentication. It aims to provide data security from the account owner of those services.
Lately, smartphone users are increasing in number, and the activity they do with smartphones is also the longer the duration. This shows that the smartphone has become an important item for modern society, and of course private

vapourminer

legendary

Activity: 4354

Merit: 3614

what is this "brake pedal" you speak of?

Quote from: redtag070 on July 24, 2018, 08:13:31 AM

I am not worried about the security itself of 2-Factor Authentication.

Rather, what I fear is that,
· Loss of smartphone
· Smartphone model exchange
It is two.

Especially to take a backup, keep it safe. Even though I am doing this, I'm worried about whether it's really okay.

if you mean just a phone backup, it may not be enough, see my post above.

write down the code that google auth initially gives you for the site. keep copies secure. then no worries about the phone dying.

and if phone is lost you can use the stored codes on a new phone (or computer/whatever) and reset them, rendering the codes on the old phone useless.

redtag070

member

Activity: 128

Merit: 10

I am not worried about the security itself of 2-Factor Authentication.

Rather, what I fear is that,
· Loss of smartphone
· Smartphone model exchange
It is two.

Especially to take a backup, keep it safe. Even though I am doing this, I'm worried about whether it's really okay.

vapourminer

legendary

Activity: 4354

Merit: 3614

what is this "brake pedal" you speak of?

Quote from: ioizisupport on July 20, 2018, 08:15:19 AM

Google 2FA work offilne with local data. You loss phone or fail device, you loss. Use Titanium backup to avoid data loss

when i restored a backup of my old dead note 4 to my replacement note 4, google auth didnt transfer although everything else did. i had to re input the google auth codes from paper backups.

it wasnt titanium backup though, i used samsungs backup software. i assume titanium needs a rooted phone? (mine isnt rooted).

cabalism13

legendary

Activity: 1428

Merit: 1166

🤩Finally Married🤩

Quote from: ioizisupport on July 20, 2018, 08:15:19 AM

Google 2FA work offilne with local data. You loss phone or fail device, you loss. Use Titanium backup to avoid data loss

Is it 100% safe? What's the feature of that TITANIUM?
I'm having some trouble regarding that OTP on a certain platform but I guess it's just their system at fault not the Google Auth.

easemypain

jr. member

Activity: 462

Merit: 2

In using 2-factor authentication 100% privacy is highly guaranteed. instead of instant access to the site after the use of username and password as first step authentication, a code is then received as a second step of verification. This code usually comes as a text, a voice or through an authy app on smartphone. Created specially for that account and at the time needed. So which makes it very safe and secure to use.

ioizisupport

newbie

Activity: 59

Merit: 0

Google 2FA work offilne with local data. You loss phone or fail device, you loss. Use Titanium backup to avoid data loss

monsanto

legendary

Activity: 1241

Merit: 1005

..like bright metal on a sullen ground.

Quote from: clip123 on July 18, 2018, 08:29:50 PM

Quote from: Welsh on January 13, 2018, 08:17:12 PM

Quote from: LeGaulois on January 13, 2018, 06:19:44 PM

If you care about your privacy you shouldn't use any Google's product, no matter how good they are. It's how the company make its income, using your privacy.... Who knows if in 10 years we learn that in fact, it was another shady product

This is almost true for anything which isn't open source.

Quote from: LeGaulois on January 13, 2018, 06:19:44 PM

I have read Authy is far better than Google Authenticator.

I would recommend staying away from Authy, but if you are to use it then make sure to turn off multi device in the settings. This prevents recovery from other phones. If you ever want to transfer to another phone though this option will need to be enabled.

if you turn off multi device and lose your phone then you won't be able to recover. So keep that in mind.

I believe with Authy you can still recover password protected backed up 2FA codes, but I think there is a 24 hour waiting period during which they review your request.

Quote from: inlovewith on June 09, 2018, 05:17:11 PM

What nobody ever really talks about is what happens when you lose your phone. I read that you can transfer it to a new phone, but if you lose it, you can't transfer it. That's really what has me paranoid. I think I might have to invest in a new phone, and keep my current one locked in a safe, and see if I can flash it, for in case something happens to it I can reinstall it to another phone.

You have a couple options. You could use Authy as mentioned above, or use a back up phone with google Authenticator, or use what I think probably is the best option: write down the secret 2FA seed on a piece of paper when you add it to your phone, and keep that list offline. Most sites will provide the seed along with a QR code of the seed when setting up 2FA. If you already have a site's 2FA setup on your phone, you can remove 2FA on that site and then add it again, this time physically writing the seed down at the same time you scan the QR code with Authenticator.

clip123

member

Activity: 193

Merit: 10

Quote from: Welsh on January 13, 2018, 08:17:12 PM

Quote from: LeGaulois on January 13, 2018, 06:19:44 PM

If you care about your privacy you shouldn't use any Google's product, no matter how good they are. It's how the company make its income, using your privacy.... Who knows if in 10 years we learn that in fact, it was another shady product

This is almost true for anything which isn't open source.

Quote from: LeGaulois on January 13, 2018, 06:19:44 PM

I have read Authy is far better than Google Authenticator.

I would recommend staying away from Authy, but if you are to use it then make sure to turn off multi device in the settings. This prevents recovery from other phones. If you ever want to transfer to another phone though this option will need to be enabled.

if you turn off multi device and lose your phone then you won't be able to recover. So keep that in mind.

BhuwanPujari

newbie

Activity: 56

Merit: 0

Two-factor authentication provides many business benefits, including: Improved security: By requiring a second form of identification, SMS-2FA decreases the probability that an attacker can impersonate a user and gain access to computers, accounts or other sensitive resources.

Criptomen

hero member

Activity: 770

Merit: 501

I'm sure that people with resources, if they want, easily trace almost anyone and 2FA is just one thread that will lead them to the right person. But if you want to use 2FA safer then you can use another phone with other SIM card with another Google Account. But I doubt that this will help you to hide from people with "powers"

ucudara

newbie

Activity: 168

Merit: 0

In case you're not utilizing two-factor verification on each and every vital online record, particularly including your essential email account, you ought to most likely reexamine your security needs. Shockingly, the bother of some two-factor frameworks keep clients who "don't think I have anything to lose" far from the framework, making them undeniably powerless.

Google has truly outstanding and most secure two-factor frameworks accessible on any real item. Since a year ago, Google has urged clients to utilize "gadget prompts," which are a pop-up message sent to your current Android gadget, or the Google application on iOS. Starting today, be that as it may, gadget prompts have turned out to be significantly more helpful, as iOS clients just need the Gmail application introduced.

daviost

jr. member

Activity: 196

Merit: 2

2FA is the second security before access your account. and it is critical. so that's why u must have a backup it too on paper or at your PC.
when you lost your 2FA, you can ask the exchanger/website support to help you recover it.
exchanger/website usually need you to give your real data so they can disable your 2FA security. it's for you own good.
but some exchanger/website took a long time to verify your data.
so before late, just backup your 2FA in somewhere else.

MrMac1000

newbie

Activity: 36

Merit: 0

I don;'t think there is any harm in using 2FA. Privacy is not really a concern for me when it comes to 2FA.

ucudara

newbie

Activity: 168

Merit: 0

2-Step Verification provides stronger security for your Google Account by requiring a second step of verification when you sign in. In addition to your password, you’ll also need a code generated by the Google Authenticator app on your phone. This is a great feature to secure our accounts.

botija

sr. member

Activity: 374

Merit: 250

I prefer to use email code verification. I know that emails can get stolen, but I keep it pretty safe. But for exchanges, that's a different story. Aunthenticator is good there.

apimembership

full member

Activity: 448

Merit: 124

2FA is the most important security measure for us that prevents us from hacks, and dont hesitate to use it for privacy concerns. Google Authenticator doesnt even use backup to cloud, it stores everything in device itself.

inlovewith

sr. member

Activity: 257

Merit: 252

What nobody ever really talks about is what happens when you lose your phone. I read that you can transfer it to a new phone, but if you lose it, you can't transfer it. That's really what has me paranoid. I think I might have to invest in a new phone, and keep my current one locked in a safe, and see if I can flash it, for in case something happens to it I can reinstall it to another phone.

Jundax

newbie

Activity: 70

Merit: 0

I always keep a $10 cell phone with a separate phone number for 2FA, dont
give it to anyone and it doesnt have an internet connection, so im pretty sure its safe

Ronaldobaban17

newbie

Activity: 146

Merit: 0

Google authenticator works offline and it is incrypted.It is very safe to use and your accounts has in safe security log in. Im using it with careful safekeeping of recovery code. With google authenticator you can rest assure that no one will able to steal your account online.

2342q6tegw

jr. member

Activity: 174

Merit: 6

I just use multi-signature wallets, that way 2FA is baked right into the protocol, with zero privacy loss. I usally go for 2 of 3 on seprate devices. That way if I lose any one (inc) the seed, I can still access wallet, but can't have a problem with others acessing unless I lose 2 devices/seeds

bravehearth0319

hero member

Activity: 1022

Merit: 500

Quote from: botany on January 13, 2018, 06:28:34 AM

Is there any loss of privacy while using 2 Factor authentication?
If you use Google Authenticator on an android phone (where essentially you have linked your google id), to authenticate the login of a third party website, can google link your google id with the credentials of the third party website?

As far as I know about this 2 factor authentication I never seen or heard that there is somebody loss their privacy by using this things. Even me,

while I'm using it in different exchange platform through Google Authenticator so far so good to me anyway.

yoseph

sr. member

Activity: 868

Merit: 266

Quote from: haremaboriginal7 on May 07, 2018, 03:03:34 AM

2FA is a must, use it whenever it is possible

I use it to protect my bitcoin wallet at all times since i dont have any of the hardware wallets. Its really recommended for very important things if you don't want others prying into your business.

PinkFox

newbie

Activity: 57

Merit: 0

Good point. Could be that you gain one safety against losing another.

erickkyut

hero member

Activity: 1176

Merit: 509

Quote from: botany on January 13, 2018, 06:28:34 AM

Is there any loss of privacy while using 2 Factor authentication?
If you use Google Authenticator on an android phone (where essentially you have linked your google id), to authenticate the login of a third party website, can google link your google id with the credentials of the third party website?

Google authenticator is very safe to use. You can use it even if your phone is not connected to the internet. It isone of the most used application to tighten the security of your account. I enabled all of the two factor authentication of my crypto related accounts. I highly recommend Google Authenticator for your 2FA.

haremaboriginal7

newbie

Activity: 25

Merit: 0

2FA is a must, use it whenever it is possible

Dhanems

jr. member

Activity: 448

Merit: 2

I used also Google authenticator,very safe and I think linking your Google accnt is not a big deal,but if you broke your phone with the Google authenticator is a BIG problem,I losted some of my accnts due to my phone broken and the Google authenticator installed there,I can't access forevermore😧

wudackprod

full member

Activity: 1316

Merit: 121

2-Factor Authentication this is a very good way to protect your accounts. I prefer 2fa with snap to phone number. Google authentificator also safe, but it's better to save keys for recovery account

RENTMONEY

jr. member

Activity: 197

Merit: 1

I can't log into Binance with google authentication. I keep getting an error message that the code I enter is wrong.

Any idea on solutions ?

I got about $1000 stuck on there.

19faraon88

member

Activity: 252

Merit: 12

This is very good in term of security but I think we don't need to activate the 2F Authentication, the privacy of the transaction maybe know by others. Just used a very good and hard to guess password this is the best security for our login.

BitcoinGirl.Club

legendary

Activity: 2800

Merit: 2736

Farewell LEO: o_e_l_e_o

Quote from: botany on January 13, 2018, 06:28:34 AM

Is there any loss of privacy while using 2 Factor authentication?
If you use Google Authenticator on an android phone (where essentially you have linked your google id), to authenticate the login of a third party website, can google link your google id with the credentials of the third party website?

In a technical way I think they can access our credentials but because they want to prove to the world how robust this product of theirs is nothing can be done to help us even in case of a lockout to our own crypto vaults which might be worth millions. I thick 3fa remains one of safest security features today.

Marco Ambrusini

full member

Activity: 364

Merit: 105

For now i think it is one of the most safest.it smoothly intergrates with which ever platform hence making it difficult for hackers to penetrate.But as technology keeps on updating itself ,developers needs to upgrade to something more secure and detailed to prevent black hats from breaking the code.

gnerro2

member

Activity: 294

Merit: 10

illustrator

Anyway.. even sms code works well. So no problem if u do something wrong with google auth.

AngelSky

hero member

Activity: 1008

Merit: 537

Quote from: wenxop on February 20, 2018, 11:55:01 PM

there is no security problem when using google authenticator because it works offline only it is an algorithm that synchronizes the keys according to the code of the application with which you want to access and does not create any backup in the cloud,
this is why when you lose your phone it is very difficult to return to that page because it does not recover

If you save your authentication key in any of your secured hardware. You will be able to access your wallet or anything with the key itself. For example with the Google authentication. You can add a new account for same wallet with the authentication key you saved.
Then again you save the 2FA again with the new one.

Even some of the wallet have the paper 2FA option too. Its all about your wish to have as a 2FA.

wenxop

full member

Activity: 462

Merit: 100

there is no security problem when using google authenticator because it works offline only it is an algorithm that synchronizes the keys according to the code of the application with which you want to access and does not create any backup in the cloud,
this is why when you lose your phone it is very difficult to return to that page because it does not recover

apimembership

full member

Activity: 448

Merit: 124

there is no official explanation that google uploads or make relation between google account and google authenticator. If we care this kind of aspect, we wouldn't use google developed android OS version or wouldn't use Google based services. If you want to be sure, just instal a android emulator on your pc,install google 2fa there and not connect it to the internet,

gnerro2

member

Activity: 294

Merit: 10

illustrator

Quote from: botany on January 13, 2018, 06:28:34 AM

Is there any loss of privacy while using 2 Factor authentication?
If you use Google Authenticator on an android phone (where essentially you have linked your google id), to authenticate the login of a third party website, can google link your google id with the credentials of the third party website?

from google support

"Google sends a random code to third-party sites to enable you to sign in to these sites with your Google Account. This code doesn't reveal any personal information. Also, the security of your Google Account will not be compromised by signing in to other sites with your account."

Rhinoboy11

jr. member

Activity: 224

Merit: 2

i really feel like 2 F A is a waste of time

Rhinoboy11

jr. member

Activity: 224

Merit: 2

Quote from: ABCbits on January 13, 2018, 01:10:40 PM

I think no since Google Authenticator works offline and even if you only add the authentication key only with vague description/name. Unless they upload your keys and description along with google account you use on your smartphone.

i wish we didn't have to use them anyways.

SmokerFace

sr. member

Activity: 958

Merit: 265

Quote from: charlotte04 on January 31, 2018, 03:05:35 AM

Quote from: botany on January 13, 2018, 06:28:34 AM

Is there any loss of privacy while using 2 Factor authentication?
If you use Google Authenticator on an android phone (where essentially you have linked your google id), to authenticate the login of a third party website, can google link your google id with the credentials of the third party website?

I am really scared about this. What if I lost my phone? How would I recover my authentication codes? Is there any possibilities I could recover them?

Every Exchange websites has a feature that when you turn on the 2FA authenticator on your account they will give you a Secret Key and Qr Code of your google authenticator even you'd lost your phone you can easily turn off or change your 2FA Secret Key by using another android device that's why before you use 2FA save the Qr code and Secret key of your account into another device so once it will lost you're not be afraid to get hacked Wink

thr3

member

Activity: 77

Merit: 13

Google Authenticator is device specific - I believe if you lose your device, it will be a pain to convince sites that you own the account, plus there are no backups

Authy - an account based authentication and supports backups (has google authenticator built in if I am not mistaken) but if this company gets hacked (or Lastpass), hackers will have a field day

stantpro

full member

Activity: 280

Merit: 101

Google authentication is an independent security feature for
your personal protection.If you invoked google authentication
from your device, it shall never be linked to any third party site
or software except if you are hacked from your own device.
More so, if the third-party software or site integrated google authentication
as a security feature to access the resources, then it is the third party's
bid which automatically has a link with google authentication process
prior to your subscription.

puwaha

sr. member

Activity: 700

Merit: 294

Quote from: Welsh on January 14, 2018, 07:23:27 AM

The main reason why I wouldn't use Google authenticator or Authy is because it's not open source. There's open source alternatives which have been mentioned above which are simply better. Before you say Google authenticator is open source, the app which you download on the store is not.

There's a very good reason why authenticator apps are not open source. You don't want someone to figure out or reverse engineer the algorithms they use to generate the codes.

RSA has been doing 2FA for a very long time. They are considered bulletproof in the enterprise market... they don't publish their code either... for the same reason.

You are more likely to get your account hacked on an exchange where they can turn off 2FA or convince support to reset it for the hacker's 2FA authenticator app.

1C6fV5DtakfKANLJ8GUV7hCaA

full member

Activity: 462

Merit: 104

Crypto Marketer For Whales

Not at all. The keys are the only ones that has been preloaded into the app and Google's servers. No personal account info is stored.

tora

member

Activity: 532

Merit: 13

I do not have a mobile and google authenticator does not work on my laptop. I use gauth for 2fa.

online73

full member

Activity: 644

Merit: 101

Ecowatt.io

Quote from: ManaMan on January 26, 2018, 10:29:16 AM

If you do care about privacy first things first you wouldn't be using apps provided by google itself. Although I think google authentication is okay, I guess you don;t still know what it can do in the background. You probably have some old mobile phone so I'll advise you to use that offline without connecting to the internet so you use that particular phone only for 2FA.

This eliminates the risks of somebody even compromising your phone and getting access to your 2FA codes and other stuff as most people like to keep their mails + 2FA on same phone and other information which can be a nightmare if somebody compromised your phone. We all know that mobile phones are somewhat first target for hackers as all of us have them and keep sensitive information in them, that's why I'll advise you to have separate mobile phone for 2FA only, if you don't have any old smartphone you can order some china phones for like 50bucks or even less they are able to run 2FA offline, all you need.

Totally agree with you, At the moment, every day a huge probability of your hacking. I have allocated a separate phone for 2FA. I do not know all the technical subtleties, but I consider this to be the most correct action. Every day, burglars are advancing in various tricks on the theft of various information and money, but a separate phone, without various online games and the like - this should be the elementary rule of security.

charlotte04

full member

Activity: 504

Merit: 102

Quote from: botany on January 13, 2018, 06:28:34 AM

Is there any loss of privacy while using 2 Factor authentication?
If you use Google Authenticator on an android phone (where essentially you have linked your google id), to authenticate the login of a third party website, can google link your google id with the credentials of the third party website?

I am really scared about this. What if I lost my phone? How would I recover my authentication codes? Is there any possibilities I could recover them?

alkhie01

full member

Activity: 378

Merit: 103

I think there is no problem using 2fa authenticator because its connected in your phone and its working even your not online.For me google authenticator really helps a lot to secure your accounts.

xwshamim

sr. member

Activity: 467

Merit: 251

https://t.me/xwshamim

No, how far i know nobody else can use it or any apps can use its if any body knows your password but don't know the authentication code he cant do anything to your account .and if you have your phone you have access if not then you have the backup key to back up your account .its very safe that is what i know about 2fa . and i m also a 2fa user .not had any problems like this yet

tbct_mt2

hero member

Activity: 2366

Merit: 838

Quote from: botany on January 13, 2018, 06:28:34 AM

Is there any loss of privacy while using 2 Factor authentication?
If you use Google Authenticator on an android phone (where essentially you have linked your google id), to authenticate the login of a third party website, can google link your google id with the credentials of the third party website?

I think it will be safe and secured if you always keep your phone offline, out of Internet connections. No-one, no hackers can trace your activities and your 2FA codes.

ManaMan

member

Activity: 238

Merit: 38

Quote from: 99th on January 26, 2018, 10:35:40 AM

Quote from: botany on January 13, 2018, 06:28:34 AM

Is there any loss of privacy while using 2 Factor authentication?
If you use Google Authenticator on an android phone (where essentially you have linked your google id), to authenticate the login of a third party website, can google link your google id with the credentials of the third party website?

John Macafee got hacked from using 2FA. It gave the hackers the ability to recover his phone number. Read about it by googling it. I never liked the idea of it anyways because of a few reasons. I have turned it off since Macafee's hack back in December.

Read my previous posts... that's why I outline that you have to have another phone which will be offline all the time. Security issue here is if an attacker gain control over your phone and you keep everything together on your smartphone. If you are lodged in to many accounts + have 2FA, when an attacker gets to your phone it is game over as everything is on one device.

John, himself, was attacked due to him saying coins of the week and therefore pumping them across multiple exchanges which as a result made him good target.

99th

member

Activity: 196

Merit: 22

Las Vegas

Quote from: botany on January 13, 2018, 06:28:34 AM

Is there any loss of privacy while using 2 Factor authentication?
If you use Google Authenticator on an android phone (where essentially you have linked your google id), to authenticate the login of a third party website, can google link your google id with the credentials of the third party website?

John Macafee got hacked from using 2FA. It gave the hackers the ability to recover his phone number. Read about it by googling it. I never liked the idea of it anyways because of a few reasons. I have turned it off since Macafee's hack back in December.

ManaMan

member

Activity: 238

Merit: 38

If you do care about privacy first things first you wouldn't be using apps provided by google itself. Although I think google authentication is okay, I guess you don;t still know what it can do in the background. You probably have some old mobile phone so I'll advise you to use that offline without connecting to the internet so you use that particular phone only for 2FA.

This eliminates the risks of somebody even compromising your phone and getting access to your 2FA codes and other stuff as most people like to keep their mails + 2FA on same phone and other information which can be a nightmare if somebody compromised your phone. We all know that mobile phones are somewhat first target for hackers as all of us have them and keep sensitive information in them, that's why I'll advise you to have separate mobile phone for 2FA only, if you don't have any old smartphone you can order some china phones for like 50bucks or even less they are able to run 2FA offline, all you need.

Ralph1075

newbie

Activity: 211

Merit: 0

Since Google authentication operates offline ,providing best securities for most websites like Binance and others, you will be provided with a private key when registering for any Google authenticated website which is meant to be guarded with care.

LeGaulois

copper member

Activity: 2940

Merit: 4101

Top Crypto Casino

Quote from: markkeian on January 22, 2018, 01:06:52 AM

i have been using Google authenticator since then and im not having any issue with it,but if u worry u can always enaable email verification ror additional security.
And make sure u disable your 2fa authentication once you think of selling ur mobiles.It happens to me i forgot to disable 2fa and sell my mobile.Glad i was able to fix it by sending ticket to support.

The main topic we've been talking is about the privacy, enable email verification isn't going to help it

Quote from: TonyMark on January 20, 2018, 12:45:46 AM

There is no harm with 2-factor authentication. It is just used for our security purpose. In fact, those accounts integrate with 2FA they are trustworthy and more secure. If you are doing some transaction on the trading or exchange platform then 2FA is essential for our security purpose.

In my opinion, giving our privacy shouldn't be the price of our security but taking it back is.

Quote

In the digital age individuals may exercise the right to privacy by giving some part of information voluntarily but cannot be forced to do The right to privacy is a part of right to liberty

markkeian

full member

Activity: 508

Merit: 101

EXMR

i have been using Google authenticator since then and im not having any issue with it,but if u worry u can always enaable email verification ror additional security.
And make sure u disable your 2fa authentication once you think of selling ur mobiles.It happens to me i forgot to disable 2fa and sell my mobile.Glad i was able to fix it by sending ticket to support.

ViceOfBTC21

sr. member

Activity: 438

Merit: 266

Quote from: TonyMark on January 20, 2018, 12:45:46 AM

There is no harm with 2-factor authentication. It is just used for our security purpose. In fact, those accounts integrate with 2FA they are trustworthy and more secure. If you are doing some transaction on the trading or exchange platform then 2FA is essential for our security purpose.

I disagree. There is a privacy harm. They know your mobile number. I know you can buy cheap old Nokia only for 2FA purposes, but in most countries (including mine) you must register your phone number. Of course you can buy registered prepaid SIM on blackmarket, but I don't condone this unless paying fine is better than losing your trading capital. Just use complicated password for exchange and wallet and you will be fine.

TonyMark

member

Activity: 135

Merit: 11

There is no harm with 2-factor authentication. It is just used for our security purpose. In fact, those accounts integrate with 2FA they are trustworthy and more secure. If you are doing some transaction on the trading or exchange platform then 2FA is essential for our security purpose.

RENTMONEY

jr. member

Activity: 197

Merit: 1

I hate how we are forced to use 2fa .. It should be our choice.

It is a pain for me to use since I don't get cell service in my area and not all exchanges allow the google version.

barnes13

hero member

Activity: 1274

Merit: 521

7enius - Your Cryptocurrency Marketing Consultant

I use Google Authenticator but got issues to login my exchange account, so I change to use Authy never have issues so far, but read all the previous post I will considering to use FIDO U2F Key from Yubico for more secure to all my account.

Coin-Keeper

hero member

Activity: 761

Merit: 606

Quote from: anjho.ace on January 18, 2018, 02:00:26 PM

2-factor authentication will give you more security on your account but always saved the encrypted message as you will be in a big problem once your phone shut down or stolen!

I don't have first hand experience with losing phone credentials but I have helped people navigate what can become a total nightmare. The better sites have papercode backups in case you lose your phone or it gets destroyed. Without those a loss of phone credentials will "wreck your day" in a big way. I ONLY use full U2F so I don't worry because I have two encrypted chips and the sites allow either to be used. The backup chip is in my safe.

anjho.ace

full member

Activity: 371

Merit: 100

2-factor authentication will give you more security on your account but always saved the encrypted message as you will be in a big problem once your phone shut down or stolen!

Saksham

hero member

Activity: 570

Merit: 500

Quote from: botany on January 13, 2018, 06:28:34 AM

Is there any loss of privacy while using 2 Factor authentication?
If you use Google Authenticator on an android phone (where essentially you have linked your google id), to authenticate the login of a third party website, can google link your google id with the credentials of the third party website?

I have put my trust in the second authentication fact. I am already using it from some time and i had no issues with it and i am confident in the Google's confidential politics.

TyfrTR

sr. member

Activity: 312

Merit: 272

I use 2-factor authentication with an offline (no sim card; no internet) mobile phone. Only when I need to sync my numbers, I'm connecting the phone to internet and making sync process. I dont know but i belive that its better to use it offline maybe.

lucianus_luciferus

full member

Activity: 335

Merit: 101

nothing is lost if you don't lose yourself

true that
i have the neo and it is so cool Grin

https://www.yubico.com/start/#yubikey-neo

Coin-Keeper

hero member

Activity: 761

Merit: 606

Quote from: LeGaulois on January 14, 2018, 07:33:56 AM

Quote from: pugman on January 14, 2018, 06:19:29 AM

Is this any good? I'd love to buy one but the USB looks too old-fashioned and doesn't have a case supporting it, possibility of it to break easily is also a thing to be taken into consideration before buying it.

I think it's the best alternative but yeah I admit it looks like a prototype from 2000. There is a tutorial if I remember so you can make your own from scratch.
There are other USBs more "swag" for example FIDO U2F Security Key from Yubico https://www.yubico.com/

By far a superior process compared to google or authy. Sure fire and encrypted privacy. I would suggest the "swag" model if you need to be mobile. The higher end models use NFC and you just touch your smartphone using NFC it authenticates everything. Cannot be beaten by a hacker. Wish we used this process here in this forum!

fabioganga

full member

Activity: 478

Merit: 113

Quote from: botany on January 13, 2018, 06:28:34 AM

Is there any loss of privacy while using 2 Factor authentication?
If you use Google Authenticator on an android phone (where essentially you have linked your google id), to authenticate the login of a third party website, can google link your google id with the credentials of the third party website?

I don't think Google would ever risk their reputation to be destroyed in an instant by breaching your privacy that way... I have used Google Authenticator extensively for a good couple of years now, never had a problem at all.

When you activate 2FA on websites you are given a UNIQUE key together with a QR code to scan. The key works on ANY phone, so it is definitely NOT linked to your Google ID and you should therefore keep that key well hidden.

pugman

legendary

Activity: 2383

Merit: 1551

dogs are cute.

Quote from: Welsh on January 14, 2018, 07:23:27 AM

This shouldn't be the case and especially so with an authenticator.

If an authenticator has a predecessor of the name Google, users would go for it. However they might not go for authy or something in the first place when they know something called "Google Authenticator", exists. Plus, most websites who have 2FA enabled recommended Google Authenticator.

Quote from: Welsh on January 14, 2018, 07:23:27 AM

The main reason why I wouldn't use Google authenticator or Authy is because it's not open source. There's open source alternatives which have been mentioned above which are simply better. Before you say Google authenticator is open source, the app which you download on the store is not.

Also, for their multi device feature to work, then your keys need to be stored on a server for it to work. So they certainly keep records/data. These are encrypted by the backup password you set. This is encrypted using AES and a randomly generated salt using PBKDF2. So the data is stored otherwise, it wouldn't be possible to restore access using another device.

True that. Google is highly overrated in some places and authy which I have been using does need a replacement.

Quote from: LeGaulois on January 14, 2018, 07:33:56 AM

I think it's the best alternative but yeah I admit it looks like a prototype from 2000. There is a tutorial if I remember so you can make your own from scratch.
There are other USBs more "swag" for example FIDO U2F Security Key from Yubico https://www.yubico.com/

Yubiko is nice because it has a USB type C, so I did like that. But 50-60$ for an authenticator, I'm not sure yet but I do want to buy one.
Anyhow, thank you for sharing that information, was really helpful. Cheesy

LeGaulois

copper member

Activity: 2940

Merit: 4101

Top Crypto Casino

Quote from: pugman on January 14, 2018, 06:19:29 AM

Is this any good? I'd love to buy one but the USB looks too old-fashioned and doesn't have a case supporting it, possibility of it to break easily is also a thing to be taken into consideration before buying it.

I think it's the best alternative but yeah I admit it looks like a prototype from 2000. There is a tutorial if I remember so you can make your own from scratch.
There are other USBs more "swag" for example FIDO U2F Security Key from Yubico https://www.yubico.com/

Welsh

staff

Activity: 3304

Merit: 4115

Quote from: pugman on January 14, 2018, 06:19:29 AM

For a lot of people if not everyone , their belief lies in reputed and "trusted" companies.

This shouldn't be the case and especially so with an authenticator.

Quote from: pugman on January 14, 2018, 06:19:29 AM

Any particular reason why? I have been using authy and I say it is any day better than Google authenticator, for it doesn't BACK up your fucking data. Almost had a nightmare when I un-installed it by mistake, had to contact so many exchanges to remove the 2FA Undecided

I personally have never had any issues with authy.

The main reason why I wouldn't use Google authenticator or Authy is because it's not open source. There's open source alternatives which have been mentioned above which are simply better. Before you say Google authenticator is open source, the app which you download on the store is not.

Also, for their multi device feature to work, then your keys need to be stored on a server for it to work. So they certainly keep records/data. These are encrypted by the backup password you set. This is encrypted using AES and a randomly generated salt using PBKDF2. So the data is stored otherwise, it wouldn't be possible to restore access using another device.

pugman

legendary

Activity: 2383

Merit: 1551

dogs are cute.

Quote from: Welsh on January 13, 2018, 08:17:12 PM

This is almost true for anything which isn't open source. .

For a lot of people if not everyone , their belief lies in reputed and "trusted" companies.

Quote from: Welsh on January 13, 2018, 08:17:12 PM

I would recommend staying away from Authy, but if you are to use it then make sure to turn off multi device in the settings. This prevents recovery from other phones. If you ever want to transfer to another phone though this option will need to be enabled.

Any particular reason why? I have been using authy and I say it is any day better than Google authenticator, for it doesn't BACK up your fucking data. Almost had a nightmare when I un-installed it by mistake, had to contact so many exchanges to remove the 2FA Undecided

I personally have never had any issues with authy.

Quote from: LeGaulois on January 13, 2018, 06:19:44 PM

You can use a USB like U2F Zero as long you don't lose it you're good to go https://www.u2fzero.com/
... and it's open source https://github.com/conorpp/u2f-zero

Is this any good? I'd love to buy one but the USB looks too old-fashioned and doesn't have a case supporting it, possibility of it to break easily is also a thing to be taken into consideration before buying it.

Welsh

staff

Activity: 3304

Merit: 4115

Quote from: LeGaulois on January 13, 2018, 06:19:44 PM

If you care about your privacy you shouldn't use any Google's product, no matter how good they are. It's how the company make its income, using your privacy.... Who knows if in 10 years we learn that in fact, it was another shady product

This is almost true for anything which isn't open source.

Quote from: LeGaulois on January 13, 2018, 06:19:44 PM

I have read Authy is far better than Google Authenticator.

I would recommend staying away from Authy, but if you are to use it then make sure to turn off multi device in the settings. This prevents recovery from other phones. If you ever want to transfer to another phone though this option will need to be enabled.

LeGaulois

copper member

Activity: 2940

Merit: 4101

Top Crypto Casino

If you care about your privacy you shouldn't use any Google's product, no matter how good they are. It's how the company make its income, using your privacy.... Who knows if in 10 years we learn that in fact, it was another shady product
I have read Authy is far better than Google Authenticator.

You can use a USB like U2F Zero as long you don't lose it you're good to go https://www.u2fzero.com/
... and it's open source https://github.com/conorpp/u2f-zero

theymos_away

member

Activity: 82

Merit: 26

The protocol used by Google Authenticator is open and should be private (in that giving a code should link you only with your account on the site), but the Google Authenticator app is closed-source, so I wouldn't rely 100% on that app. There are open source alternatives. Authy works differently, and I do not recommend it. SMS is really bad. U2F is probably good, though I haven't actually looked into it closely yet.

Welsh

staff

Activity: 3304

Merit: 4115

If you are that bothered about privacy issues then you can always use a separate mobile phone just for that purpose. I mean they are pretty cheap to pick up these days.

If you are using SMS verification then those messages could potentially be intercepted by someone malicious and Coinbase actually hit the news for this reason. I don't believe that a third party website is required to send any of the credentials to Google though. So you are safe in that aspect.

ABCbits

legendary

Activity: 2870

Merit: 7490

Crypto Swap Exchange

I think no since Google Authenticator works offline and even if you only add the authentication key only with vague description/name. Unless they upload your keys and description along with google account you use on your smartphone.

botany

legendary

Activity: 1582

Merit: 1064

Is there any loss of privacy while using 2 Factor authentication?
If you use Google Authenticator on an android phone (where essentially you have linked your google id), to authenticate the login of a third party website, can google link your google id with the credentials of the third party website?

Topic: 2-Factor Authentication (Read 1734 times)