I just tried to login into amazon.co.uk to buy some stuff. I can't get 2FA notification on my phone and in order to see the recovery page for "I don't have access to my Two-Step verification" I need 2FA........
back
2 comments
a) usually, when you set up 2fa you get a set of 'recovery codes' for this exact situation - do you not have those? b) usually, there's an option to authenticate via SMS or reset your 2FA via email - does Amazon not offer any alternative? Ultimately, though, you need to exercise care when setting up 2fa - make sure the device you use is one that you're going to have around for a while, or you have a decent way of migrating to a newer device if necessary.
I didn't not set up 2FA, it was forced on me. The problem is that Amazon wants to send a notification, not a SMS or something else. I can't pick an alternative.
If I don't have a smartphone i'm screwed. https://postimg.cc/LJ6KVgZr
Never use 2FA alone. You always need a 3rd factor in case you lose one of the others which is more likely than losing a single password. I don't know why websites don't enforce this.
In case of TOTP one way of doing that is to scan the QR code on two devices. Many services only allow 1 MFA hardware/virtual device (I'm looking at you, AWS...)