I'm all forward on 2 step authentication. I understand how it is way more secure than a simple password. However I'm always afraid to start using it because I believe that in some cases I could be "left out" my account.
Google (for example) provides a lot of ways to avoid that (SMS, calls, several phone numbers, offline, printed codes, etc). However I can't stop thinking in the "what if ... and I can't login when I need it".
So I thought of an hybrid authentication process that I believe it could work and I want to know if you see in flaws in it or you think it would be safe. It would be using 2 step authentication but being able to set up one (or several) just-in-case passwords. If, for some reason you can't access the second-step-device you can use one of those passwords (without the second authentication factor). Then, that password would be disabled until you access the account using the 2 step authentication and you can decide to either delete it or re-enable it (according the environment where you used it).
What do you think?