A couple of people have mentioned that they've ended up having to go through the 2FA Reset process after changing phones.
Here are a few tips on how to avoid this inconvenience.
The 2FA options in your KM account
Firstly, let's look at the basic 2FA options.
NB The Mint account only has Authenticator app
As the screen shows, using Text Message results in an SMS being sent to your phone that includes the 6 digit code, whereas Authenticator App requires you to install another app that will generate a new 6 digit code every 30 seconds.
Text Message
Choosing Text Message means that providing you keep your number when you change your phone, there should be nothing required to continue receiving the 2FA codes via SMS.
SMS is not necessarily the most secure, but on the other hand is used by a lot of banks.
Authenticator app
For the Authenticator App, there are a variety of apps that can be used
Automated transfer to new phone
Some of these apps will have the ability to be "recovered" on a new phone.
This applies to all of the ones specifically listed above.
Authy has a "Mutli-device" feature.
authy.com
Google Authenticator used backup codes to do the recovery. It's latest version(s) now offers cloud storage of 2FA codes, though some may be concerned about the level of encryption.
Microsoft Authenticator also provides cloud storage for ease of transfer.
support.microsoft.com
Duo also allows addition/removal of devices
It was straightforward to find these guides, so if you are using a different authenticator, it will hopefully be simple to locate similar info.
The above methods will allow transfer of multiple 2FA codes, so if you have a lot of codes (eg for banking/other sites as well as Kinesis), they are worth using.
You want to make sure that you have what's needed for your recovery path before you change/lose/damage your phone, so find/check through the relevant guide now.
Disable on old phone/Setup on new phone
If you are only using the Authenticator for Kinesis, a possible alternative is to disable 2FA in your Kinesis account using your old device, then to set it up again using your new device.
If you also have a Mint account, don't forget to do the same there.
Obviously, the additional security offered by 2FA will be absent between disabling and re-setup.
Here are a few tips on how to avoid this inconvenience.
The 2FA options in your KM account
Firstly, let's look at the basic 2FA options.
- Text Message
- Authenticator app
NB The Mint account only has Authenticator app
As the screen shows, using Text Message results in an SMS being sent to your phone that includes the 6 digit code, whereas Authenticator App requires you to install another app that will generate a new 6 digit code every 30 seconds.
Text Message
Choosing Text Message means that providing you keep your number when you change your phone, there should be nothing required to continue receiving the 2FA codes via SMS.
SMS is not necessarily the most secure, but on the other hand is used by a lot of banks.
Authenticator app
For the Authenticator App, there are a variety of apps that can be used
- Authy
- Microsoft
- Duo
- etc
Automated transfer to new phone
Some of these apps will have the ability to be "recovered" on a new phone.
This applies to all of the ones specifically listed above.
Authy has a "Mutli-device" feature.
New Phone? Lost Phone? Our Multi-Device Feature Keeps You 2FA-Ready! - Authy
Learn how to turn on the Authy Multidevice feature and access authentication tokens from multiple devices.
authy.com
Google Authenticator used backup codes to do the recovery. It's latest version(s) now offers cloud storage of 2FA codes, though some may be concerned about the level of encryption.
Get verification codes with Google Authenticator - Android - Google Account Help
If you set up 2-Step Verification, you can use the Google Authenticator app to generate codes. You can still generate codes without internet connection or mobile service. Learn more about 2-Step Verif
support.google.com
Microsoft Authenticator also provides cloud storage for ease of transfer.
Back up and recover account credentials in the Authenticator app - Microsoft Support
support.microsoft.com
Duo also allows addition/removal of devices
It was straightforward to find these guides, so if you are using a different authenticator, it will hopefully be simple to locate similar info.
The above methods will allow transfer of multiple 2FA codes, so if you have a lot of codes (eg for banking/other sites as well as Kinesis), they are worth using.
You want to make sure that you have what's needed for your recovery path before you change/lose/damage your phone, so find/check through the relevant guide now.
Disable on old phone/Setup on new phone
If you are only using the Authenticator for Kinesis, a possible alternative is to disable 2FA in your Kinesis account using your old device, then to set it up again using your new device.
If you also have a Mint account, don't forget to do the same there.
Obviously, the additional security offered by 2FA will be absent between disabling and re-setup.
