3 ms·
Not always. If the provider can be social engineered into granting you access to the account after proving access to that number then I’m not sure “better than
by ryukafalz 7y ago
Not always. If the provider can be social engineered into granting you access to the account after proving access to that number then I’m not sure “better than nothing” is that solid.
- jotm 7y agoBetter than having a strong password bypassed using shoddy recovery procedures.
- icebraining 7y agoOf course, that means it's not 2FA, just 1FA.
- NotSammyHagar 7y agoIt's potentially worse than nothing because you can steal someone's sim card and then use that to reset their account password. This is because (as in almost every company that uses text messages for 2fa) you use the sms to authenticate the reset.