3 ms·
2FA works in practice against people who don't have physical contact with you. For most people, that's the only threat vector they're worried about. It hardly
by striking 10y ago
2FA works in practice against people who don't have physical contact with you. For most people, that's the only threat vector they're worried about.
It hardly makes your life more difficult, and it does help at least a little bit. So it's worth setting up.
- x0x0 10y agoNot really; sms as 2fa has regularly enabled people to steal accounts they otherwise couldn't have gotten by allowing password resets by stealing your phone number. See eg @deray getting hacked.
- erroneousfunk 10y agoIf a password reset is allowed by pin that's not two factor authentication, that's SINGLE factor authentication. I know we tend to think of 2FA as anything involving a pin sent to your phone, but it does require two factors. GMail, for instance, will not allow a password reset with just a phone pin.