3 ms·

Adding a phone number that people KNOW about can make it LESS secure. A workaround is to get a phone number that is only used for identity verification and not

Adding a phone number that people KNOW about can make it LESS secure. A workaround is to get a phone number that is only used for identity verification and not given out to anyone.

nchelluri 10y ago
That sounds like a good fix, but a tall order for most people.
wyclif 10y ago
One way to accomplish this would be with, ironically, a Google Voice-type service (but associated with a completely independent email provider)
- ocdtrekkie 10y ago
  This can actually be problematic. I've found many 2FA services use text services with shortcodes which sometimes do and sometimes don't work with services like Google Voice. Back when I used Voice, my actual cell number was only used for identity verification.
- ollie87 10y ago
  Not really, there are phones out there that have two SIM-card slots.
StavrosK 10y ago
A solution would be to not add a phone number, and store the password in a password database instead.
vijayp 10y ago
That's a good point. Though I think it would be challenging to have a phone number that no one knows which you also carry around with you. It's possible if you use something like Google Voice for most of your regular calls, but you still need to make sure that the telco can't tie your name to your number…
jakub_g 10y ago
This works as long as they don't insist on verifying you through that secondary phone number (this is the case for now for Google I think - if something suspicious is going on, they ask you if you want an sms with a verification code, or an email to a secondary address; but maybe not all services with 2FA make this optional). It's not fun to have 2 phones always with you. But maybe the 2-SIM devices will become more mainstream soon, which can solve this problem.
- codedokode 10y ago
  You don't have to have a second phone (or even just a SIM card) with you, you can keep it at home.
CrendKing 10y ago
The reason why they use phone in the first place is that you will always have it with you. The reason why you have your phone with you is because you use it to make phone call. Unless you are suggesting to buy phone that supports dual SIM cards, I think this idea is not very practical. Why not have physical TFA device instead (they are usually much cheaper and lighter than a phone)?

Adding a phone number that people KNOW about can make it LESS secure. A workaround is to get a phone number that is only used for identity verification and not given out to anyone.

nchelluri 10y ago

That sounds like a good fix, but a tall order for most people.

wyclif 10y ago

One way to accomplish this would be with, ironically, a Google Voice-type service (but associated with a completely independent email provider)

ocdtrekkie 10y ago
This can actually be problematic. I've found many 2FA services use text services with shortcodes which sometimes do and sometimes don't work with services like Google Voice. Back when I used Voice, my actual cell number was only used for identity verification.
ollie87 10y ago
Not really, there are phones out there that have two SIM-card slots.

StavrosK 10y ago

A solution would be to not add a phone number, and store the password in a password database instead.

vijayp 10y ago

That's a good point. Though I think it would be challenging to have a phone number that no one knows which you also carry around with you. It's possible if you use something like Google Voice for most of your regular calls, but you still need to make sure that the telco can't tie your name to your number…

jakub_g 10y ago

This works as long as they don't insist on verifying you through that secondary phone number (this is the case for now for Google I think - if something suspicious is going on, they ask you if you want an sms with a verification code, or an email to a secondary address; but maybe not all services with 2FA make this optional). It's not fun to have 2 phones always with you. But maybe the 2-SIM devices will become more mainstream soon, which can solve this problem.

codedokode 10y ago
You don't have to have a second phone (or even just a SIM card) with you, you can keep it at home.

CrendKing 10y ago

The reason why they use phone in the first place is that you will always have it with you. The reason why you have your phone with you is because you use it to make phone call. Unless you are suggesting to buy phone that supports dual SIM cards, I think this idea is not very practical. Why not have physical TFA device instead (they are usually much cheaper and lighter than a phone)?