Email is not really a 2FA though if it can also be used to reset your password. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

gregoriol on Jan 17, 2021 | parent | context | favorite | on: That's not how 2FA works

Email is not really a 2FA though if it can also be used to reset your password.

lkbm on Jan 17, 2021 [–]

Interesting point. I hadn't thought about that. Helps that access to my email is 2FA, but it does make for a single point of failure.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact