(I reposted here a question I previously asked in SuperUser, I think this section is more appropriate)

Back in the days defining a path leading to loss of data or loss of online accounts was easy: losing the user/pass was enough. Nowadays with two factor authentication involving SMS or token generators, the analysis of the possible ways of failure is more complex. This reasoning applies also to credit cards and similar stuff, since the locking of a credit card relies on calling a specific telephone number quickly, and probably providing additional data.

I would like to find a way to track them in a comprehensive way, at least for the most important accounts (basically, the ones that go beyond user/pass authentication).

Some examples:

Google accounts: either user/pass only, or (with 2FA) user/pass/[token generator|SMS|printed codes]. Now, most people keep the token generator in the smartphone: the loss of the smartphone MAY be sufficient to lock access to the account, if the codes have never been printed.

Dropbox: a vault with passwords could be stored on Dropbox (for example, 1Password does that). However it's common (if you use 1Password or equivalent like Lastpass) to store the Dropbox password in the vault. If the desktop computer gets stolen, accessing the dropbox account MAY be lost. Not to mention that Dropbox supports two factor authentication and things can get more complicated.

I thought about using a normal graph editor (OmniGraffle for example), but keeping track of the multiple paths is not easy.

My question is how to track the different paths that lead to failure, given than each account (or equivalent) may have multiple alternative paths, all of which must fail to permanently lock the account, and each path is made of several elements the failure of any of which will cause that path to fail.

closed as too broad by schroeder, Iszi, tlng05, Scott Pack, Graham Hill Jul 28 '15 at 8:51

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • By "lose the account" do you mean lock the account? – RoraΖ Jul 27 '15 at 16:20
  • Yes, to lose access to it by being unable to authenticate. I edit the question. – FarO Jul 27 '15 at 16:25
  • This question probably in the category "too broad". It looks like you want a book on the subject. Maybe, limiting the question to one system would make it easier to answer. – Gudradain Jul 27 '15 at 17:10
  • One system? you mean only one account provider? I was curious to know if there is a way to track dependencies of that kind. If it is only about one or two accounts, I can do it by hand. – FarO Jul 27 '15 at 17:18

Browse other questions tagged or ask your own question.