What’s the point of 2FA, if there’s a recovery code you can use when you lose ability to use your 2FA device?

Question

In the end, isn’t that recovery code just the same as a password?

In: 174

Answer 1

2FA is a stupid attempt to look more secure and nothing more.

In theory it means the bad guys can’t listen and figure out your password.

In practice it means you can’t change devices, numbers or email addresses ever and you have to run to the other end of the house or call your wife to log in.