cybersecurity

3262 readers

1 users here now

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

founded 1 year ago

MODERATORS

shellsharks@infosec.pub

tweedge@infosec.pub

Current account recovery best practices? (infosec.pub)

submitted 10 months ago by viking@infosec.pub to c/cybersecurity@infosec.pub

15 comments fedilink hide all child comments

Hi all,

Need to pick your brains for a bit regarding best practices for handling of account recovery issues while traveling.

Premise would be that my phone gets lost or stolen, and I may not have easy access to my laptop either, and being in a foreign country I couldn't easily get a copy of the original SIM to restore via OTP.

Consequently, I also don't really love the idea of using some password manager with a master password and no F2A.

Under those circumstances, what would you consider the best way forward to ensure accessibility without crippling myself in the process?

The only thing I can come up with is a random subdomain on one of my domains, with random username and random password, where I store an encrypted container containing txt-files. Maybe even further obscured with a random cypher (all numbers / letters shifted x positions to the right or something).

But there's gotta be other use-cases out there, so I was wondering what you are using?

Ideally something that doesn't involve another person.

Thanks!

you are viewing a single comment's thread
view the rest of the comments

[–] satanmat@lemmy.world 1 points 10 months ago (1 children)

Well that’s kinda the point. Missing your factors is supposed to make it harder.

So — account recovery code written out, that doesn’t say it is for your account?

E.g. Apple allows it as a backup to your Apple ID should you get locked out.

Depends on the syy

[–] viking@infosec.pub 1 points 10 months ago

Yes exactly, but I still need to be able to access it myself.

Writing the codes out is one thing, but taking a paper with me on international trips actually increases the risk of it getting lost, damaged or stolen as well; and if someone was to figure out what they are for, that could even increase the potential risk. Hence my question what other people are doing :-)