Two factor impossible to switch off

Surely it should be possible to turn off two factor authentication if you are still logged in?

Tim

Comments

  • Scotty
    Scotty Posts: 493 Staff member 🤠

    Hi tjfs,

    Thanks for posting.

    This can only be deactivated with a 2-factor code. Otherwise if the software is accidentally left open, it would be possible to remove @-FA, change the password and username all in one go therefore hijacking an account.

    Because of this, the code or recovery key is required to deactivate this.

    -Scotty

    Senior Moderator
    Did my reply answer your question? Why not accept it as a solution to help others?
  • tjfs
    tjfs Posts: 4
    I can see the thinking but there really should be a backup method as other sites have such as texting or emailing your address. I'm faced with having to move all my machines to a new address.
  • tjfs
    tjfs Posts: 4
    "nearly all accounts that offer these superior 2FA options also use text-messaging as a required backup"

    Source: The Economist magazine