Why is using SMS bad for 2FA?

Re:Why is using SMS bad for 2FA? by PranavBerry on Wednesday November 17, 2021 @03:12PM (#29258265)

> plug my Yubikey into as many laptops as I would like.

What if you don't own a physical key?

> I have to trust you to not leak my 2FA. Authy does this already and so I don’t use Authy

This is optional. You can choose not to have a recovery email. Just curious though, what do you do if your Yubikey gets stolen/damaged/lost?

[ Parent | on HN ]

Re:Why is using SMS bad for 2FA? by ViViDboarder on Saturday November 27, 2021 @11:46PM (#29366234)

I have a backup Yubikey as well as backup codes stored in an encrypted file and backed up to several different devices.

[ Parent | on HN ]