,
4 tweets,
1 min read
Read on Twitter
I enrolled in Google's Advanced Protection and lost access to my personal Google account on my phone. When attempting to log in, got their "We can't be sure you're actually you" error. Unenrolled.
Still can't access on phone; password is correct but I'm tripping something.
Still can't access on phone; password is correct but I'm tripping something.
I still have access on my personal laptop; my account still shows the phone (which has not changed) as being on the list of devices used in last 30 days.
What are my options here? Google is suggesting the account recovery flow but I am terrified that will lock out laptop, too.
What are my options here? Google is suggesting the account recovery flow but I am terrified that will lock out laptop, too.
Sidenote: and this is the experience that a relatively sophisticated engineer with a material security background has when dealing with account lifecycle management. Imagine how fun it is for civilians.
Aha, I have successfully blackboxed Google's authentication product decisions to determine the problem: you just can't use iPhones and FIDO/etc keys together without a backup 2FA method. (They don't tell you that.)
