3 ms·
2FA through SMS is unfortunately the norm.. I own a "dumb" phone and a yubikey, and guess what: 95% of servies online from Jira to Uber or Instagram/Facebook w
by cmehdy 6y ago
2FA through SMS is unfortunately the norm..
I own a "dumb" phone and a yubikey, and guess what: 95% of servies online from Jira to Uber or Instagram/Facebook will not let you use a yubikey without setting SMS as the main and first recovery process, and sometimes just not let you use a yubikey at all anyway. Which is absurd in 2020 but apparently that's still where we're at.
IIRC Github, Bitwarden and Google have done a good job with that and my yubikey can at least be put to good use there.
- ryukafalz 6y agoIt hasn't been quite that bad in my experience, but perhaps I've gotten lucky re: the services I use. (But yeah Facebook... their track record here is not great: https://techcrunch.com/2018/09/27/yes-facebook-is-using-your-2fa-phone-number-to-target-you-with-ads/ https://techcrunch.com/2018/09/27/yes-facebook-is-using-your...) I have a mobile plan that only works within the US, and I just buy a temporary SIM whenever I travel - meaning I have a completely different phone number until I get back. If I had to get into my iCloud account for whatever reason while traveling overseas and I was using an Android phone at the time, I probably would not have been able to.