3 ms·

I don’t understand. If you’ve rightfully decided not to offer sms as a 2 factor option because of its poor opsec (number porting, sim cloning, etc.) why then of

I don’t understand. If you’ve rightfully decided not to offer sms as a 2 factor option because of its poor opsec (number porting, sim cloning, etc.) why then offer it as a recovery option. Your 2-Factor is only a secure as the weakest recovery option.

detaro 8y ago
But they do offer SMS as 2FA, they just recommend against it? (Same for recovery presumably?)
- snowwolf 8y ago
  Ah yes I missed that. Hopefully they do explain the risks of using SMS. At least they don’t force you to use it unlike some sites.