Locked out of email and 2FA: breaking the loop
Your second factor lives in an app whose recovery runs through an email that needs that same app. How to map the chain, find the ring, and break it.
Lost phones, backups and moving between authenticator apps.
Your second factor lives in an app whose recovery runs through an email that needs that same app. How to map the chain, find the ring, and break it.
Authy fails in ways other authenticators do not: a retired desktop app, multi-device, a backup password nobody can reset, and no export to fall back on.
Push approval and six-digit codes fail for different reasons. Number matching, work and school accounts, and what a cloud backup restore actually brings back.
Why Google Authenticator codes get refused: the clock setting Google moved out of the app, codes rejected after a new phone, and the QR settings it ignores.
What that QR code actually holds, what a photo library does with it once it syncs, and the triage for screenshots already in your camera roll.
Reinstalling restores only what something was already holding. What each app brings back, why your 2FA is still on, and the order that gets you in tonight.
Google Authenticator, Microsoft Authenticator or Authy code refused? Fix the clock in the operating system first, then the six causes that survive it.
A sheet of one-time codes is a bypass for your second factor. Where to keep it, what to do when you spend one, how to regenerate a set, and the yearly audit.
Authy has no export. Here is what that really means, the methods people still suggest, and the safe way to move every token to a new app.
Try KeyNesta free. The web app needs no sign-up.
Open the web app All platforms