Differences

This shows you the differences between two versions of the page.

--- two-factor_authentication [2019/08/21 06:32] – neil
+++ two-factor_authentication [2019/08/21 06:37] – neil
@@ Line 15: / Line 15: @@
 This page focusses on "things that you possess".
+====Enable two-factor authentication wherever you can ====
+Because of the security benefits of having two-factor authentication in place, you should enable it wherever you can. This normally means "on every site and service which supports it".
+====Have a back-up mechanism in case you lose your device(s)====
+A risk of enabling two-factor authentication is that, if you lose control of the second factor, you will be unable to access the service in question.
+===Backup one-time codes ===
+If you are using one-time codes, you are usually prompted to download and save some backup codes, which you can use if you lose your one-time code generator.
+If you use a password manager, and if you back this up, you might store your backup codes in that.
+Alternatively, or perhaps additionally, you might print them off, and store them in a safe.
+===Backup hardware devices ===
+If you are using a hardware device, good practice is to buy two identical devices, and configure them to mirror each other.
+Keep one with you, to use for logging in, and keep the second in a safe.
 ====Something you have: one-time codes ====
-Some sites will let you configure your account to require you to put in a one-time
+Some sites will let you configure your account to require you to put in a one-time code, in addition to your username and password.
+These one-time codes are usually generated by a piece of software on your computer or phone, or else through a dedicated hardware device.
 Backup codes.
@@ Line 24: / Line 48: @@
 Two hardware devices, so you can store a backup safely in safe.
-Enable two-factor authentication wherever you can, but make sure you have a back-up mechanism in case you lose your device(s).