Posted January 07, 2023
anitmetee: The 1st gives me thrills in itself. Google did that to me, leaving as 2FA the latest used phone that has died thanks to built-in battery, then got replaced. Like, it's fine to enable for new accounts, not fine for older all of a sudden without consent, I'll even say that's bad practice that may cause loss. If someone wants this kind of 2FA, manual enabling is always an option.
I am quite sure that GOG did it automatically. If one could disable it after that, the tickets from those without should get very low priority if the account did get hacked.
Who declines a protection tool, should not ask for help after.
Btw, Google provides a limited number of authentification codes which you can use in case your 2FA device does not work anymore. They have the same function as a PUK if you lost your PIN.
Download them, save them, keep them for emergency.
edit: of course, if codes arrive via SMS then you don't need those, in the worst case all you need is to get a SIM replacement with the same number. You should deactivate the old one anyway, if your phone gets stolen.
Post edited January 07, 2023 by neumi5694