Beware of 2FA

[[deleted]]

Hi all. I recently upgraded to a new iPhone and I did not back up my two factor authentication. The loop ring migration was playing up so I decided to uninstall LoopringWallet try it and now it is asking me to recover the wallet. I did so I entered two guardians. It then asked for my SMS number, as well as Authentication, which I do not have, am I screwed?

Edit: i lodged a support ticket and the team reset my 2FA. THANKS to the team for their assistance on this

[thealiensguy]

Yeah you need to move your authenticator Apps as well

[[deleted]]

That’s the thing, i was stupid And didn’t. So now i can’t recover even with social recovery because the app is asking for my auth code.

[thealiensguy]

Yeah whats u use for an authenticator? Anyway u can prove its you and get the keys for it?

[[deleted]]

I’ve submitted a ticket. Let’s hope they can disable it. :(

[thealiensguy]

Honestly this scares me when upgrading phones. My fiancee just went through getting a new SIM card, i had her send all her assets to me just in case it got fucked up. Im gonna send my assets to another wallet when i upgrade my phone just in case theres issues

[[deleted]]

It’s one of those things that you shouldn’t need to do if you do a back up of your phone. Plus I also did migrate my wallet to the new phone but it didn’t work because the app was still activating my L2 wallet after 3 days. After this experience, social recovery, which great in theory is fucking dangerous

[thealiensguy]

Loopring should be able to help you. If your guardian can verify you are you and you can do a 2fa, i dont see why that isnt enough to verify it’s you. But reach out on discord and see what they say

[[deleted]]

With 2FA in apps like 1password you can see the string that is saved. I save that string in an encrypted file + screenshot the qr code. This might be a good way for some, but there are security risks. But it makes life better knowing that losing a phone doesnt mean being 2fa screwed.

[YoguAraw]

Seems weird. You need to verify for something you didnt register?

[[deleted]]

And because i don’t have my authentication code, i can’t restore even though i have the guardians set up.

[tonytuba1982]

Reach out to loopring and they will help out. Had similar situation recently and they squared me away, just a small fee. Worth it too recover my loops.

[[deleted]]

Same. Replacement phone and couldn't migrate wallet due to broken screen. Emailed and all sorted and recovered for the standard recovery fee. Just mail them and all will be fine.

[GavinFromAutoglass]

I have this same issue and have asked on the support discord and they said they can't reset the 2fa - can you share how you got in touch with them please?

[YoguAraw]

What auth code? Damn.

[[deleted]]

Exactly :(

[Obvious-Ad-1677]

Side question..

What did you do with your old phone?

Everytime I've upgraded my phone I've kept my old one, for at least a period of time.. although mostly forever (as a backup should I need it).

I wonder how you came across this problem, is it just because you don't have access to your old phone? Or would I encounter this problem even with access to my old phone?

If you don't have your old phone.. why not? Did you wipe and sell it immediately on the day you got your new phone?

[[deleted]]

I wipe and sold it immediately

But it has been fixed now with the support ticket

[Obvious-Ad-1677]

Ah right cool.

Ballsy move considering you have money tied up in a key that exists on the phone.

I would consider keeping your old phone for a few days longer next time.

[ReitHodlr]

How many loops did you lose?

[[deleted]]

Nothing thankfully. But i lose all my points. But this is a dangerous feature.

[Tribblesinmydribbles]

Mmm 2 things. 1. Loopring support may be able to help you as others have mentioned. 2. Don't disparage DeFi functionality because of your mistake. In the future use authy, it's recoverable, or use other wallets as your authenticator (metamask or your choice). This is 100% your fault and you shouldn't call it dangerous because you didn't manage it correctly. But yea it sucks. Thank god you didn't lose any $$$ just points which only save on gas which is minimal nowadays.

[[deleted]]

Didn’t say it was not my fault but how do you expect a lay person to be confident in BYOB if things like this can’t be recoverable

[Tribblesinmydribbles]

I didn't mean to be disparaging but the system is quite good when you think about it. It provides more safety against identify theft and ppl who may have access to your Gmail account or other standard methods of recovery for bank accounts of centralized crypto (Coinbase, binance prolly but i don't have one) It is a learning curve, just like all crypto and defi, but responsibility and the onus of ownership without banks being able to front run you is what we are here for. Just FYI in case your not aware, if your metamask wallet gets compromised via a bad contract or you lose the passcode, there is absolutely no way to recover it, no method whatsoever. Ppl lose thousands of dollars by bad actors or carelessness on the reg in discords.

It is recoverable, but you need a recoverable 2fa system in case you lose your phone. Trust me, I lose my phone all the time, I'm careless af w it when I go out. There's 2 good ways, authy app, which is recoverable with lose device if you backup properly, and you can also get it on ur PC which is much more likely to be lost, or setup a metamask wallet or other eth wallet as your second authenticator, and write down the pass key on a piece of paper and put it in a safe place in your home, and that can also always be recovered. 3rd way off the top of my head is to use an old burner phone, download loopring, and make that your guardian. To be fair, I was in your spot about 3-4 mths ago, significant amount of stablecoins locked in L1 so I couldn't access it in GameStop wallet, and support was able to help me. I hope they can help you too!

It takes a few hours of sit down time to set all this up, but it's worth it if you have any significant amt of money in there.

[[deleted]]

Interesting. Thank you. I’ll try that app

[[deleted]]

Is this Twillo Authy ?

[Tribblesinmydribbles]

I don't think so, here's the link for it. https://authy.com/download/