3 ms·
We need to stop calling this 2FA. If you can reset your password via text or email, it’s not. I rather have no way of reseting the password. And if it is lost,
by hartator 7y ago
We need to stop calling this 2FA. If you can reset your password via text or email, it’s not. I rather have no way of reseting the password. And if it is lost, it is lost.
- snarf21 7y agoExactly. SMS as a 2FA option is worse than no 2FA. It actually creates a new attack vector.