4 ms·
Google offers many different 2 factor methods including Google Prompt, TOTP, and security key - all of which are better choices than SMS. The author is right to
by latortuga 7y ago
Google offers many different 2 factor methods including Google Prompt, TOTP, and security key - all of which are better choices than SMS. The author is right to say that SMS is not enough but he didn't go far enough: only use SMS-based 2FA if it's your only 2FA choice for your critical accounts, and consider alternative services if it's your only choice.
- Macha 7y agoThe issue is that the forgot/lost device flow allows you to remove your more secure 2FA with only SMS verification.
- knorker 7y agoYou can turn off SMS/phone auth fallback, at least in gsuite.
- rando444 7y agoIf you use one of those secure options, click the lost your device option, and then you can describe to everyone how secure the recovery process is.