How could 2FA be disabled if you need 2FA in order to login to disable it and my free OTP+ is biometric protected?

  • Lightscription@lemmy.worldOP
    link
    fedilink
    arrow-up
    1
    ·
    1 month ago

    This is what I thought. I keep telling people they don’t exclusively own their passwords / security tokens once they give it to a site. Salted hashes to obscure the pw don’t even matter since the admin could also bypass that. Tanks for the validation.

    • undefined
      link
      fedilink
      arrow-up
      3
      ·
      1 month ago

      And you better pray the website owner (websites in general, not Lemmy specifically) at least hashes your password.

      • Lightscription@lemmy.worldOP
        link
        fedilink
        arrow-up
        2
        ·
        1 month ago

        yes, the more layers of security, the better, even if it is just a futile matter of time to consume the time of an ATP.