4 ms·
Namecheap has a good service but their lack of proper 2 factor auth (opting for only SMS which is really broken[1] rather than proper TOTP) scared me away a whi
by Karunamon 9y ago
Namecheap has a good service but their lack of proper 2 factor auth (opting for only SMS which is really broken[1] rather than proper TOTP) scared me away a while ago.
After raising this issue last February, they said it was coming soon. A year and some more of no action later, I transferred all my domains out since using known-broken security apparently isn't a priority for them, and it probably reflects in other and harder-to-see ways.
[1]: https://www.theregister.co.uk/2016/07/24/nist_says_sms_no_good_for_authentication https://www.theregister.co.uk/2016/07/24/nist_says_sms_no_go...
- djmobley 9y agoIt's not full TOTP support, but they do now offer 2FA via an Authy OneTouch implementation.
- Karunamon 9y agoI did not know that! Looks like[1] it went live back in July. I still wish they'd have used TOTP rather than this onetouch thing that's restricted to a single app, but just about anything was better than SMS, so this is a welcome development. [1]: https://blog.namecheap.com/announcing-onetouch-2fa/ https://blog.namecheap.com/announcing-onetouch-2fa/
- deleted 9y ago[deleted]