Blog

Posts on two-factor authentication: which second factor to use, where backup codes belong, how to leave Authy, and what zero-knowledge really costs.

Choosing 2FA 6 How it works 3 Backup and recovery 10

How it works

Can 2FA be bypassed? The five routes, ranked

Yes, but not by breaking the code. The five real bypass routes ranked by how often they reach an individual, and what to check on your own accounts tonight.

PhishingAccount recoverySession hijacking

Backup and recovery

Where to store your 2FA backup codes

A sheet of one-time codes is a bypass for your second factor. Where to keep it, what to do when you spend one, how to regenerate a set, and the yearly audit.

Backup codesAccount recoveryStorage

Browse by topic

Try KeyNesta free. The web app needs no sign-up.

Open the web app All platforms