‹ BackHN Continuity

Thread

Ask HN: How to recover Google auth after phone stolen?

124 points · 131 comments · keymasta

  1. sampullman · · focus · HN ↗
    If you don't have the authenticator backup codes and you didn't turn on cloud sync in the app, you might be out of luck.

    You can get a replacement SIM though and use it with a new phone, so the phone number recovery option should work.

    1. uberman · · focus · HN ↗
      This. Can't you get your number moved to a new phone? I have never don't anything magic when upgrading my phone other than move contacts.
      1. jwr · · focus · HN ↗
        How would moving your number to a new phone help? We're talking TOTP here, not SMS "auth".
        1. john_strinlai · · focus · HN ↗
          does google not offer a backup via sms? it's a common enough recovery flow elsewhere. (i dont use google stuff, so i am genuinely asking)
          1. b112 · · focus · HN ↗
            Any less secure backup method, means others are less secure.
            1. mrguyorama · · focus · HN ↗
              Google actually puts effort into security for "normal" people who don't want to earn a PhD in cryptography just to have a damn free email account or watch Mr. Beast

              That's why they had powerful and effective account takeover protection even 15 years ago. The kind that will prevent the hacker from taking over your account even though they got access to all your factors, because it shouldn't take expertise to know that if you logged in from Oregon twenty minutes ago, you definitely aren't also logging in from Ecuador.

              Which of course makes it all the more stupid that your credit card company, all your medical service providers, and Facebook don't meet that absurdly low bar. Facebook will happily hand control to the scammer in Laos who got one of your factors and somehow that gave them access to change your password and recovery email

              1. Dylan16807 · · focus · HN ↗
                The best backup method doesn't need any computer knowledge, it's writing down or printing a few passwords and putting that piece of paper in the same box as your taxes or birth certificate.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.