‹ BackHN Continuity

Thread

Ask HN: How to recover Google auth after phone stolen?

124 points · 131 comments · keymasta

  1. sampullman · · focus · HN ↗
    If you don't have the authenticator backup codes and you didn't turn on cloud sync in the app, you might be out of luck.

    You can get a replacement SIM though and use it with a new phone, so the phone number recovery option should work.

    1. uberman · · focus · HN ↗
      This. Can't you get your number moved to a new phone? I have never don't anything magic when upgrading my phone other than move contacts.
      1. jwr · · focus · HN ↗
        How would moving your number to a new phone help? We're talking TOTP here, not SMS "auth".
        1. john_strinlai · · focus · HN ↗
          does google not offer a backup via sms? it's a common enough recovery flow elsewhere. (i dont use google stuff, so i am genuinely asking)
          1. b112 · · focus · HN ↗
            Any less secure backup method, means others are less secure.
            1. cwillu · · focus · HN ↗
              A required “more secure” method is less secure if it means you can be locked out by not-exactly-uncommon real-life situations.

              Denial of service is a security issue.

              1. hedora · · focus · HN ↗
                I’ve repeated it a hundred times security = confidentiality, integrity and availability.

                One reason to strongly prefer Apple over Google is that (as I understand it) you can still walk into a store with ID and recover your online identity.

                1. jwr · · focus · HN ↗
                  > One reason to strongly prefer Apple over Google is that (as I understand it) you can still walk into a store with ID and recover your online identity.

                  Is this true? If so, in what countries? (Poland has no Apple stores, for example, for inexplicable reasons Apple has been giving the middle finger to this market)

                  That would be a huge difference.

              2. kaycey2022 · · focus · HN ↗
                I think Google’s own textbook on SRE has an example in its very first chapter where everyone gets locked out of their bus fleet WiFi thanks to their secure system reaching an unforeseen state
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.