News for hackers. Stuff that matters.

A comment on Ask HN: 2FA Contingency During Phone Service Outage.

Re:Ask HN: 2FA Contingency During Phone Service Outage by phillipseamore on Tuesday June 16, 2020 @10:59AM (#23539899)
No one should rely on SMS for 2FA! Phone numbers are bad authentication tokens (they can change hands, be diverted etc).

Proper 2FA should either be TOTP codes and apps for those or hardware tokens. Any of these should also have backup codes.

[ Parent | on HN ]

There are no comments on this comment yet.