I feel I'm the only one who absolutely hates the zoo of MFA I'm subjected to as part of the latest and greatest in security for the masses. I hope something comes along to replace all of it soon.
I feel like my PC is should be the source of truth for my identity, not my phone. Phones get lost, stolen, and destroyed at times and there's no guarantee that I'll have access to my phone number for the rest of my life. I'm already completely screwed if my phone number changes, because not every service offers one-time-use codes to bypass 2FA.
It is absolutely baffling that there's no desktop 2FA program that's widely used. I guess tech savvy people are using android emulators on their PC to run google authenticator, but that's such a pain.
Has anyone had luck with yubikeys for personal accounts?
I simply use Authy instead of Google Authenticator. It has a desktop app that syncs to the Authy app on my phone.
With Windows 11, you'll soon be able to run Android apps without needing to install an Android emulator, but that's not here and now, though...
As for the part of my comment in parentheses; I'm graciously awaiting the facial equivalent of "passwords in plaintext on the server". It's rather uncommon these days but I can almost guarantee it'll happen at least once.
https://sixcolors.com/post/2021/06/wwdc-2021-apple-takes-the...
Frustratingly, there is no option to add a TOTP code (like most other services, including Google, offer) or to disable SMS 2FA as a backup (despite its known security issues).
I say this mostly because I assume Apple would use your Apple ID credentials as a way to log in to these services on a Windows or Linux machine, as they do currently with the "Sign in with Apple" flow.
Could even set up rules for like "only during business hours in my country"