4 ms·
I like that they aren't providing a phone number as a backup. There has been a lot of discussion recently questioning SMS-based 2FA as a target for social engin
by marcc 10y ago
I like that they aren't providing a phone number as a backup. There has been a lot of discussion recently questioning SMS-based 2FA as a target for social engineering (and other attacks).
https://news.ycombinator.com/item?id=12163046 https://news.ycombinator.com/item?id=12163046
- sytse 10y agoThanks. Phone number backups are hard to set up and there are concerns about the security. That is why we have not build support for it. BTW I recommend using 1password so that you don't have to reset 2FA when you move phones (like with Google Authenticator).