How could 2FA be disabled if you need 2FA in order to login to disable it and my free OTP+ is biometric protected?

  • LightscriptionOP
    link
    11 month ago

    This is what I thought. I keep telling people they don’t exclusively own their passwords / security tokens once they give it to a site. Salted hashes to obscure the pw don’t even matter since the admin could also bypass that. Tanks for the validation.

    • @[email protected]
      link
      fedilink
      31 month ago

      And you better pray the website owner (websites in general, not Lemmy specifically) at least hashes your password.

      • LightscriptionOP
        link
        21 month ago

        yes, the more layers of security, the better, even if it is just a futile matter of time to consume the time of an ATP.