How could 2FA be disabled if you need 2FA in order to login to disable it and my free OTP+ is biometric protected?

  • LightscriptionOP
    link
    fedilink
    arrow-up
    1
    ·
    8 months ago

    This is what I thought. I keep telling people they don’t exclusively own their passwords / security tokens once they give it to a site. Salted hashes to obscure the pw don’t even matter since the admin could also bypass that. Tanks for the validation.

      • LightscriptionOP
        link
        fedilink
        arrow-up
        2
        ·
        8 months ago

        yes, the more layers of security, the better, even if it is just a futile matter of time to consume the time of an ATP.