Hacker News Reader

I lost an AWS account many years ago to losing an MFA device during an adventure that I will avoid documenting here.

What is really weird is that AWS account is tied to a very old (1998?) Amazon account. I wonder what this request will reveal.

View on HN

Stories like this are what keep me using strong passwords (in Keepass) instead of MFA. I'd love to hear more details as I'm finding more and more services push the MFA aspect, and I don't use a smartphone. Thanks.

Most password managers can also store TOTP tokens. A few services support registering redundant Yubikeys. Failing that, they usually give you a recovery code with which you can restore access to an account you're locked out of.

Reply on news.ycombinator.com