2 ms·
If you are worried about phishing (you should be) don't use SMS or code-based two-factor. They can and are being phished. Use U2F (yubikeys). They are phishing
by Buge 10y ago
If you are worried about phishing (you should be) don't use SMS or code-based two-factor. They can and are being phished. Use U2F (yubikeys). They are phishing proof.
- bigiain 10y agoFWIW, I recently got a YubiKey Fido - their U2F-only version, and a disappointingly small number of sites I care about have implemented U2F... It's also website-in-Chrome only right now - which is a little limiting, no help protecting your mobile devices. (Not that any of the other usb 2FA devices are gonna work too well on iOS either...) I'm not sure how up-to-date this page is, but there's a stark difference between ticks in the OTP column and the U2F column... (Apart from that, it seems to be a well made bit of kit - but I think I'm gonna spend the extra and order a Yubikey 4 or Nano...)