One authenticator app for multiple accounts?

[Fletch]

Hopefully people are becoming more familiar with the new two step verification, so I wanted to ask:

1. If you use say Google authenticator with 10 different Amazon accounts are any of them going to get linked this way?

2. They MAKE you use a phone number at the same time you first set up two factor verification, but are there any circumstances in future where they will force you to use the phone number instead of the app as the verification? Or will you always be able to use the app?

[Fletch]

I was hoping for some replies here, I thought people would be getting familiar with the authenticators as it's soon to be a requirement

[empirestate]

Google don't share data with Amazon....if that's what you are asking...

[rsot]

empirestate is correct.

@Fletch, 6 or so hours between posts is not a lot of time to get responses and people can be busy on the forum. I would, in your shoes, wait more time before bumping a thread - weekend coming up even. All the best.

[chaichaoyi]

There is no communication between Authenticator and the "outside" world. The app is basically a QR code scanner + a calculator that displays output with the QR code and time as the input (i.e. the private key + public key stuff).

If you are still in doubt (or you don't have a smartphone and don't intend to buy one), then theoretically you can read some academic paper, learn to "read" the QR code with eyeball and do the calculation with Excel.

[elmo]

If you want to be very cautious about it, keep your authenticator app always offline. No internet connection required for it to work.

[Fletch]

Originally Posted by chaichaoyi

There is no communication between Authenticator and the "outside" world. The app is basically a QR code scanner + a calculator that displays output with the QR code and time as the input (i.e. the private key + public key stuff).

If you are still in doubt (or you don't have a smartphone and don't intend to buy one), then theoretically you can read some academic paper, learn to "read" the QR code with eyeball and do the calculation with Excel.

Yes but is there an identifier that the app gives away when you use it with a site?
For example if I scan with my authenticator the ID might be 0001, if you do yours might be 0002. So if I use the same authenticator ID 0001 across multiple accounts it would get linked. Have others used the same authenticator across multiple accounts without issue?

Do you also always have the option to choose between using the authenticator or the phone number, or do they sometimes force you to use the phone number?

[AL15BMW]

Hi
I just tried doing it last night and once I enter the code it then asks for the alternate number and they will send code on that number which you need to enter eventually so you need an alternate number anyway.


Sent from my iPhone using Tapatalk

[Fletch]

Originally Posted by AL15BMW

Hi
I just tried doing it last night and once I enter the code it then asks for the alternate number and they will send code on that number which you need to enter eventually so you need an alternate number anyway.


Sent from my iPhone using Tapatalk

I know they require it the first time, but what about in future?

[elmo]

Originally Posted by Fletch

Yes but is there an identifier that the app gives away when you use it with a site?
For example if I scan with my authenticator the ID might be 0001, if you do yours might be 0002. So if I use the same authenticator ID 0001 across multiple accounts it would get linked. Have others used the same authenticator across multiple accounts without issue?

Do you also always have the option to choose between using the authenticator or the phone number, or do they sometimes force you to use the phone number?

If the app stays 100% offline, I do not see how they could communicate

[AL15BMW]

Originally Posted by elmo

If the app stays 100% offline, I do not see how they could communicate

You meant stay offline permanently means that device never goes online on which we install the app or you doesn't take it online while generating codes only and later you can put the device online?


Sent from my iPhone using Tapatalk

[Freakzilla]

Install the App, then don't go online again with it.

Originally Posted by AL15BMW

You meant stay offline permanently means that device never goes online on which we install the app or you doesn't take it online while generating codes only and later you can put the device online?


Sent from my iPhone using Tapatalk

[elmo]

Originally Posted by Freakzilla

Install the App, then don't go online again with it.

Exactly. I don't see how they could communicate if it stays offline and never connects.

[chaichaoyi]

Originally Posted by Fletch

Yes but is there an identifier that the app gives away when you use it with a site?
For example if I scan with my authenticator the ID might be 0001, if you do yours might be 0002. So if I use the same authenticator ID 0001 across multiple accounts it would get linked. Have others used the same authenticator across multiple accounts without issue?

Do you also always have the option to choose between using the authenticator or the phone number, or do they sometimes force you to use the phone number?

It's one-way communication (authenticator reading Amazon's QR code). Even if two accounts are accessed using two codes that are generated on the same authenticator, Amazon won't be able to tell.

[Phd]

Originally Posted by AL15BMW

You meant stay offline permanently means that device never goes online on which we install the app or you doesn't take it online while generating codes only and later you can put the device online?


Sent from my iPhone using Tapatalk

If you are really worried, put your phone on Airplane mode, scan the code, close the app, then take it off of Airplane mode.

Hope that helps.

[ScottieBoi]

Excuse my ignorance, but just learning. What is the point of Google Authenticator? Why not just verify over the phone? Is it just to avoid having to keep the phone number active?

[elmo]

Google authenticator makes it easy to verify multiple accounts. Rather than 1 phone per authentication.

Always keep it offline etc.

[ScottieBoi]

Originally Posted by elmo

Google authenticator makes it easy to verify multiple accounts. Rather than 1 phone per authentication.

Always keep it offline etc.

Right, but you do originally have to have a phone to create the account, right? This is just so you don't have to keep the phone service connected? Or is this just take the place of an actual phone all together?

[chaichaoyi]

Originally Posted by ScottieBoi

Right, but you do originally have to have a phone to create the account, right? This is just so you don't have to keep the phone service connected? Or is this just take the place of an actual phone all together?

It replaces a phone. An iPod or iPad (or any smart device that you can install authenticator app on) will be good enough. Cellular subscription is not necessary, wifi is good enough.

[ScottieBoi]

Hmmm... Got ya. Thanks for the info!

[ScottieBoi]

Originally Posted by chaichaoyi

It replaces a phone. An iPod or iPad (or any smart device that you can install authenticator app on) will be good enough. Cellular subscription is not necessary, wifi is good enough.

Came back across this cause I didn't get an answer. You have to have a phone number, even if you use Authenticator. What's the point? Is it just so you don't have to keep the phone service connected? Do you use a prepaid to verify, then allow it be disconnected?

[ScottieBoi]

I think, from what I'm taking now, you have to either have 2 phones or 1 phone and Authenticator. Is that the gist of it?