Backup codes: Instagram wants a screenshot, Microsoft forbids one

[Redaktion]

Turning on two-factor authentication gives you 10 backup codes and the instruction to keep them safe. Almost nobody says where. Microsoft says not to store them on the device you sign in with, Instagram suggests a screenshot, and Google's own help page names the file the codes are saved as. Infostealer malware searches for exactly that.

https://www.notebookcheck.net/Backup-codes-Instagram-wants-a-screenshot-Microsoft-forbids-one.1392379.0.html

[indyp]

I once was locked out of my Amazon account. The dual factor auth stopped working, and the process to log in otherwise would fail.

I contacted Amazon. 5 minutes later, they had disabled dual-factor and sent me a password reset link to my inbox.

So, gotchya, Amazon: you don't have any security, period. I mean, yeah, I did gain access, but so could someone else. Scary.