How could 2FA be disabled if you need 2FA in order to login to disable it and my free OTP+ is biometric protected?

  • LightscriptionOP
    link
    fedilink
    11 month ago

    This is what I thought. I keep telling people they don’t exclusively own their passwords / security tokens once they give it to a site. Salted hashes to obscure the pw don’t even matter since the admin could also bypass that. Tanks for the validation.

      • LightscriptionOP
        link
        fedilink
        21 month ago

        yes, the more layers of security, the better, even if it is just a futile matter of time to consume the time of an ATP.