3 ms·
How does backing up your keys in a server somewhere is better than SMS auth?
by vmateixeira 10y ago
How does backing up your keys in a server somewhere is better than SMS auth?
- aianus 10y agoYou can encrypt them. I have no control over the idiots at my telecom who will reroute my number for anyone who provides the correct answer to some easy 'security questions'.
- vmateixeira 10y agoI see what you mean but if you encrypt them you will end up with an extra encryption key... that you'll need to store somewhere else.. otherwise, holding just an encryption passphrase is pointless as it's just the same as having two login passwords.
- JohnStrange 10y agoIt's not, most likely. A working 2-factor scheme needs two devices and communication channels to the end user that are completely independent of each other. If your mobile phone links to an account somewhere (e.g. Google account) that you can also access from the other device (e.g. a PC), and security-related settings can be changed from the other device, too, then that's insecure out-of-the-box.