Hacker News Reader

Regarding #6, use Authy.

Does everything Google authenticator does, but you can upgrade your phone and use other devices as backups (in case of device loss)

View on HN

1Password can also do that and then you don’t need a second app if you decide to use it as a password manager

This would make your wallet a single point of vulnerability. If someone gains access to your wallet, they would know your passwords and your 2FA tokens.

While it's certainly better than no 2FA, it's not as good as having the token and password in different places.

Please note though: The backup feature makes Authy vulnerable to phone porting attacks.

True, but it's optional. Their 'by default' options are pretty reasonable.

Reply on news.ycombinator.com