Please [email protected]
As far as I can tell, no. There’s no backup codes and there’s no “verification” of the codes when you enable it.
Also, you do not get logged out of any other sessions even if they were logged in before 2FA was enabled.
So I typically leave my desktop browser logged in as a backdoor in case something goes wrong I can use that session to re-disable 2FA.
Then once I have verified it working on mobile I will sign out the desktop browser and sign it back in with the 2FA key.
But yeah, no backup codes. Apparently an admin can disable 2FA on your account if you get locked out, or so I have heard.
I would argue that even in that scenario it’s still better to have the source available than have it closed.
If nobody has bothered to audit it then the number of people affected by any flaws will likely be minimal anyway. And you can be proactive and audit it yourself or hire someone to before using it in anything critical.
If nobody can audit it that’s a whole different situation though. You pretty much have to assume it is compromised in that case because you have no way of knowing.
I think much like Lemmy you just want to find one that fits with your ideals. Check the rules and whatnot and make sure you are willing to comply with them.
I wouldn’t call this a recommendation but personally I went with Fosstodon.
I didn’t really look very hard before selecting one of the first few I came across though.
What the fuck did you just fucking say about me, you little bean salad?I’ll have you know I graduated top of my class in the Bean Corp, and I’ve been involved in numerous secret raids on Heinz, and I have over 300 confirmed types of beans.I am trained in bean warfare and I’m the best Adzuki in the entire US beaned corps.You are nothing to me but just another bean.I will wipe you the fuck out with precision the likes of which has never bean seen before on this Earth, mark my fucking words.You think you can get away with saying that shit to me over the Internet? Think again, string bean. As we speak I am contacting my secret network of Garbanzo beans across the USA and your baked beans are being traced right now so you better prepare for the soy, maggot.The soy that wipes out the pathetic little thing you call your life.You’re fucking dead, string bean.I can be anywhere, anytime, and I can bean you in over seven hundred ways, and that’s just with my Edamame.Not only am I extensively trained in unarmed beaning, but I have access to the entire arsenal of the United States Navy Beans and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little mung bean.If only you could have known what unholy retribution your little “clever” comment was about to bring down upon you, maybe you would have held your fucking beans.But you couldn’t, you didn’t, and now you’re paying the price, you goddamn chickpea.I will shit furries all over you and you will drown in baked beans.You’re Fava, Pinto.
I think it means they have the Holy Spirit within them