George Jones

Curious Musings

Oct 2024

Just turn it off: The battle for phone-less 2FA

I’m on a quest to leave my phone off for peace of mind, focus, etc. One of the biggest challenges is authentication, e.g., banks wanting to text you for 2FA, Google auth for one-time passwords, etc.

I use KeePassXC for my passwords. This is a template for setting info about 2fa in my keepass entries Notes section. It will allow me to serach for things like “phone:Required:yes” or “phone:blocksGoogleVoice:yes. Tags don’t let you serach for partial matches.

I’m keeping it in notes of my KeePass account entries rather than in a separate file (org mode or spreadsheet) because “When information exists in two places, one of them is wrong”. I Should be able to export if needed.

The meaing of the keys used below is:

2faKeys:yes=supported,enabled
2faKeys:no=supported,not enabled
2faKeys:UNSET=supported, not enabled
2faKeys:xxx=not supprted

For each entry, copy this template, edit and paste into Notes

--------------------------cut here---------------------------
2fa:enabled:[yes|no|xxx]
2fa:phone:Required:[yes|no]
2fa:phone:num1:[#|UNSET|xxx]
2fa:phone:num2:[#|UNSET|xxx]
2fa:phone:blocksGoogleVoice:[yes|no]
2fa:email:[foo@bar.com|UNSET|xxx]
2fa:ybikey:[yes|no|xxx]
2fa:symantecToken:[yes|no|xxx]
2fa:GoogleAuth:[yes|no|xxx]
2fa:TOTP:[yes|no|xxx]
+2fa:passkey:[yes|no|xxx]