2FA with Google Authenticator workaround

[albertcuy]

Hi All,


Let's say that i use it as the sole authentication database/method, then lose my phone. How can i recover? tia

[meyergru]

As always with TOTP: Export the keys before you lose them and store the them away in a safe place.

With Google authenticator, export is somewhat limited, but you can use tools like this: https://github.com/krissrex/google-authenticator-exporter

Another way would be to allow ssh access with private keys and modify the /config/config.xml as to allow login without 2FA.