Tony D’Addeo
@deodad
this is right and will add some more color: - warplet isn't directly recoverable via email, it's recoverable with a proof from the custody account of an FID - Farcaster accounts have their own recovery mechanism built that lets you designate another Ethereum account that can recover the FID - if you sign up via Warpcast the default recovery address for your Farcaster account is one controlled by Warpcast - Warpcast will approve a recovery of your Farcaster account if can you prove control of the email you signed up with - since email compromise happens, we have an Advanced Protection mode that let's you setup MFA so that in order to recover your account you need to prove both control of email + code from an authenticator app - we recommend everyone, especially those holding lots of funds in their warplet, to turn on Advanced Protection in settings https://x.com/bleuonbase/status/1895474554233036981?s=46
2 replies
4 recasts
17 reactions
Mikado
@mikadoe.eth
Don't authenticator apps use email as well? if someone's email is compromised don't they have access to the authenticator app as well?
1 reply
0 recast
1 reaction
Tony D’Addeo
@deodad
I can't speak for every authenticator app or how users configure them but in general no as this would nullify the entire premise of MFA If someone do have your authenticator app setup so that an email compromise alone will lead the compromise I'd suggest they use a different back up strategy
0 reply
0 recast
3 reactions
