But was I suppose to write down a coinbase two factor google authenticator key? Or was I suppose to take a picture? Is this the preferred 2FA for coinbase?
For google authenticator, you will need to backup the QR code which can consist of some 2fa for some sites or all, depending on the one you marked or checked. Click on the three dots at the right upper corner of the google authentication app UI -> click on 'transfer accounts -> export accounts -> uncheck the ones you do not want to backup and click on 'next. The QR code pop up can be backup.
On gemini, it seems they do not have google authenticator. It seems authy is what they offer. So that is what one should choose? But when make this your 2FA, you need to write a code down right? Or take a picture?
You can use anyone you like or want, they work for one another. Do not let the name specified on a site like google or authy confused you, you can use any other authentication app of your choice.
What happens if you have no access to your phone? Do you need to make sure you have a backup copy of the code?
Paper backup or other offline backup will be preferable. Having three offline backups in different safe locations.
What if you have two phones? Could you install it in both phones so in case something happens to your main phone, you still have it on your backup phone?
Install on an airgapped device will be good. It is not good to have it installed on the device you are using, you should not have it installed especially the device that the exchange accounts are. If you phone is compromised, then if installed on the same phone, then the 2fa is likely also compromised with the exchange at ones so far both are accessed by the same device
Google authentication is close source, use open source one is the best as the source code is available for the public.
Example of open source authenticator:
- Aegis. I prefer Aegis
- andOTP
. I never thought it could be easily extracted like that on Aegis. But definitely 'no' on Google authenticator.
