I'm trying to secure all my accounts, changing passwords, ... so I read many threads about password security, 2FA and I remembered these things : passphrase are better, must be different for each services and 2FA must be turn on but never use text message or phone call.
So I have two questions:
- Is it safe to give a recovery phone number or recovery email address to my Gmail account?
- What is the best app for 2FA? And what happens if I lost my phone?