2FA while traveling abroad: what breaks, and when
SMS codes stop at the border, and switching to an app has to clear the SMS check first. A dated plan before you fly, plus what to try once you are abroad.
Posts on two-factor authentication: which second factor to use, where backup codes belong, how to leave Authy, and what zero-knowledge really costs.
SMS codes stop at the border, and switching to an app has to clear the SMS check first. A dated plan before you fly, plus what to try once you are abroad.
Your second factor lives in an app whose recovery runs through an email that needs that same app. How to map the chain, find the ring, and break it.
Authy fails in ways other authenticators do not: a retired desktop app, multi-device, a backup password nobody can reset, and no export to fall back on.
Push approval and six-digit codes fail for different reasons. Number matching, work and school accounts, and what a cloud backup restore actually brings back.
Why Google Authenticator codes get refused: the clock setting Google moved out of the app, codes rejected after a new phone, and the QR settings it ignores.
What that QR code actually holds, what a photo library does with it once it syncs, and the triage for screenshots already in your camera roll.
Reinstalling restores only what something was already holding. What each app brings back, why your 2FA is still on, and the order that gets you in tonight.
The same six digits on a second phone or laptop: why it works, the three routes to get there, and the button that quietly kills every device you set up.
Yes, but not by breaking the code. The five real bypass routes ranked by how often they reach an individual, and what to check on your own accounts tonight.
Google Authenticator, Microsoft Authenticator or Authy code refused? Fix the clock in the operating system first, then the six causes that survive it.
A sheet of one-time codes is a bypass for your second factor. Where to keep it, what to do when you spend one, how to regenerate a set, and the yearly audit.
What a security key does that an authenticator app cannot, what it costs, what breaks when you lose it, and the setup that uses both well.
Bitwarden, 1Password, Proton Pass and Apple Passwords can all hold TOTP codes. What that protects, what it gives up, and who should keep them apart.
Why texted 2FA codes are weaker than an authenticator app: SIM swaps, port-outs, SS7, and the phishing both share. Plus how to move accounts off SMS.
Passkeys stop phishing in a way 2FA codes cannot. How they work, why most accounts still need TOTP, and why account recovery so often falls back to codes.
Most authenticators give you one flat list and a search box. Here is what folders, groups and separate vaults look like at a few hundred codes.
Twilio retired the Authy desktop apps in March 2024. If you want codes on the computer you work on, here are the options that still exist.
Authy has no export. Here is what that really means, the methods people still suggest, and the safe way to move every token to a new app.
Zero-knowledge is the reason we cannot read your codes. It is also the reason we cannot get them back for you. Here is the mechanism, and the trade it makes.
There are only 19 posts so far. Try , or , or .
Try KeyNesta free. The web app needs no sign-up.
Open the web app All platforms