Hacker News Reader

> unless you opt in to cloud providers holding your data there is no easy way afaik to migrate your authenticator apps to another phone.

You could self-host Bitwarden/Vaultwarden, or something like that.

> don’t get me started on apple’s unpredictable model of sending 2fa to some other “trusted” device which means tou never know what tou need to bring with you.

I think they send 2FA to all supported devices on one's Apple account?

View on HN

i just ran into a situation activating a new device in which apple were trying to send to a device i had forgotten to “properly” remove from that icloud account.

and also another situation in which the 2fa code would flash on the remote device and disappear in a fraction of a second. i eventually captured it with screen recording but every time i did it the code was not accepted.

my conclusion: apple had silently ruled that i would not be allowed to activate using that particular icloud account. no idea why. i tried a different one and things went through ok.

arbitrary power in practice.

Reply on news.ycombinator.com