On: Google Authenticator now supports Google Account s...

[bombolo]

So what do you do when your phone falls down and breaks?

[ris → bombolo]

Account recovery codes & other means of backup authentication until I can generate new MFA tokens. It's really not a big deal, whereas it looks like the next big cloud hack will be.

[obarthelemy → bombolo]

I take my previous phone out of its drawer. Or my tablet.

[bombolo → obarthelemy]

Very funny. But how do you login into things without the otp seed?

[iavael → bombolo]

Use another device with _another_ seed (since this is auth factor of ownership you must not share seed between multiple devices just like pki private keys and pgp keys). Or if you don't have backup otp generator then use backup codes.

[obarthelemy → bombolo]

It's standalone 2FA, not a paswword manager. There's no seed.

[bombolo → obarthelemy]

Oooooh, you don't understand how google authenticator works!

[obarthelemy → bombolo]

Try it: it works offline.

[bombolo → obarthelemy]

It doesn't work from a broken phone.