‹ BackHN Continuity

Thread

Ask HN: How to recover Google auth after phone stolen?

124 points · 131 comments · keymasta

  1. sampullman · · focus · HN ↗
    If you don't have the authenticator backup codes and you didn't turn on cloud sync in the app, you might be out of luck.

    You can get a replacement SIM though and use it with a new phone, so the phone number recovery option should work.

    1. uberman · · focus · HN ↗
      This. Can't you get your number moved to a new phone? I have never don't anything magic when upgrading my phone other than move contacts.
      1. jwr · · focus · HN ↗
        How would moving your number to a new phone help? We're talking TOTP here, not SMS "auth".
        1. john_strinlai · · focus · HN ↗
          does google not offer a backup via sms? it's a common enough recovery flow elsewhere. (i dont use google stuff, so i am genuinely asking)
          1. b112 · · focus · HN ↗
            Any less secure backup method, means others are less secure.
            1. cwillu · · focus · HN ↗
              A required “more secure” method is less secure if it means you can be locked out by not-exactly-uncommon real-life situations.

              Denial of service is a security issue.

              1. kaycey2022 · · focus · HN ↗
                I think Google’s own textbook on SRE has an example in its very first chapter where everyone gets locked out of their bus fleet WiFi thanks to their secure system reaching an unforeseen state
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.