3 ms·
2FA is great, but the only options Apple provides for 2FA are SMS/call and a proprietary 2FA that only works if you have an iDevice. If you don't own one and yo
by ryukafalz 6y ago
2FA is great, but the only options Apple provides for 2FA are SMS/call and a proprietary 2FA that only works if you have an iDevice. If you don't own one and you don't want to give Apple your phone number, tough luck.
Neither TOTP nor FIDO2 is an option, as they would be for most other accounts.
- cmehdy 6y ago2FA through SMS is unfortunately the norm.. I own a "dumb" phone and a yubikey, and guess what: 95% of servies online from Jira to Uber or Instagram/Facebook will not let you use a yubikey without setting SMS as the main and first recovery process, and sometimes just not let you use a yubikey at all anyway. Which is absurd in 2020 but apparently that's still where we're at. IIRC Github, Bitwarden and Google have done a good job with that and my yubikey can at least be put to good use there.
- ryukafalz 6y agoIt hasn't been quite that bad in my experience, but perhaps I've gotten lucky re: the services I use. (But yeah Facebook... their track record here is not great: https://techcrunch.com/2018/09/27/yes-facebook-is-using-your-2fa-phone-number-to-target-you-with-ads/ https://techcrunch.com/2018/09/27/yes-facebook-is-using-your...) I have a mobile plan that only works within the US, and I just buy a temporary SIM whenever I travel - meaning I have a completely different phone number until I get back. If I had to get into my iCloud account for whatever reason while traveling overseas and I was using an Android phone at the time, I probably would not have been able to.