Don't Use 2FA Without These! What Are 2FA Backup Codes?

Today we’re answering questions that I’ve seen in my comment section many, many times…: What are 2FA backup codes? How do I set them up? And why are they so important?

This episode is sponsored by Yubico!

Becoming a Morse Code Member by checking out the perks linked here!:

💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜

💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜

SUPPORT MY WORK

💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜

FOLLOW THE SOCIALS THINGS

💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜

TECH I USE AND RECOMMEND

💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜

MY OTHER SHOWS

💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜

GET IN TOUCH
Mail ✈

💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜

😍 FTC DISCLAIMER 😍
Affiliate links listed above allow me to receive a small commission. Any sponsorships for videos are noted in video and listed in descriptions. Any products provided as gifts are listed above. Thank you for your support!

Comment section code of conduct policy:
Constructive feedback is appreciated, but please leave unproductive, divisive and harmful conversation at the door. Hateful comments are not tolerated, and these kinds of messages will be automatically removed. Thank you for making this community a welcoming experience for all viewers :)

[xileets]

Users ALWAYS gotta remember that their account is only as secure as the weakest login option. If you cannot disable SMS, for example, this is the strongest your account can get.

Personally, prefer OTP apps because I always lose dongles, but still love the use of hard passkeys.

[person-fykd]

Lost my main secret key glad I listened to this advice and had 2fa backups

[shegocrazy]

I have 2 yubikeys but unfortunately too many places don't support setting up two yubikeys.

[shgyskzer]

I keep mine on an encrypted flash drive. So, in a sense, there's 2FA in getting them (the physical thing + a strong password to decrypt everything).

[jeffhale]

Thanks for sharing…great information. Blessings on your day!

[ColoRadio]

GM Shannon, always has great content... J

[jeff_]

What about in the event a user has its email hacked. The attacker browses the email, and finds an email from a website the user belongs to. The attacker navigates to the website and changes the email address and password. Should backup codes be a method of account recovery? If so should a user be able to recreate them on their own? In this case the attacker can just reset them negating their use..

[MaxPower-]

Yubikeys keys are cool and all, but once passkeys are adopted more widely I can see their utility diminishing greatly since their function can be replaced by TPM or TEE elements in existing devices. These elements provide the same type of “something you have” factor but without having to carry around extra hardware. I guess Yubikeys might still be useful for physical device access (vs. logging into online resources) although technically I guess one could setup say a mobile phone as a required factor for logging into a PC in place of a Yubikey.

[TylerAlderson]

Wouldn't it be more secure to erase all the backup codes in order to prevent a brute force? To overcome the lack of backup codes use just an other app/key instead?

[Melker]

Having your old phone fully functional even after you bought your new phone, seems to me to be more practical. The installed app authenticator on the old phone works as backup to the installed app authenticator on your new phone. Always have two fully functional app authenticators installed and working at any given time.

[jsleezy]

i tottally am in love witrh Shannon 🥰🥰🥰🥰🥰 look are cool and all but an intelligent mind is everything!! great content for us tech 🙃🙃🙃

[FluffriousCorgii]

Hi! I have terrible decision bout backup codes. I never use them because I not trusted it but I’m conflicted rn

[jamiebury]

i prefer to just write them down safely but ofc its handy they saved them, but i dont see it being great, i mean if u have lost your password and cant get in to get the codes what good is it?

[Godisgood-pv]

I re install roblox when i went back on 2fv and i never pit it on 😢😢new 😭😭😭😭

[bernie.avtechnician]

So once I have used the backup code, how do I disable my 2fa in say my crypto exchange, so I can start from scratch and then activate the 2fa again

[jamesedwards]

2 FIDO keys? I have way more than that.

[crc-error-]

Hello Shannon, I just bought 2 keys, is it possible to use one as primary and the other as "backup"?

[DixonLu]

Any 2nd factor device (like Yubikey) is one more thing to remember to bring on a trip that can be lost. Where can I put it that is less vulnerable than my phone?