Item — HN Reader

>iOS backups are consistent in backing up everything sans stuff in the Secure Enclave

Do they now back u TOTP generators? I lost access to an account I had since my teens because when restoring from backup, I had no MFAs in my Google Authenticator. Since I had imported my teenage cell # into Google Voice, when the backup codes I'd generated for the account failed to restore access, I lost access to my gmail + my phone number I'd had for decades, despite taking what seemed to be reasonable steps.

(I'd backup my iPhone to my laptop, and backup my laptop to a USB hard drive, one of which would live in my house and another in a secure offsite location.)

Nope not in general, gotta use multiple second factors and/or the second factor reset key.

Well unfortunately, if the backup method is SMS MFA, and that SMS # is now behind Google's cloud, you can become locked out. Really terrible, from a UX perspective -- I managed to go decades without a data loss, and then poof -- every email, calendar, and contact from my late teens to my 30s erased.

Google Authenticator at least does support cloud uploads.

Since when?

Currently, I back up all my TOTP generators in KeePass to avoid this.

(It's simple to throw the file onto a usb or other data store)

I like that solution better than pushing my seeds to "the cloud".