3 ms·
I think you mean: username+password+sms = username+sms (no password) But I agree, and would take it a step further: username+password+sms = username+sms || u
by wccrawford 6y ago
I think you mean:
username+password+sms = username+sms (no password)
But I agree, and would take it a step further:
username+password+sms = username+sms || username+password
And in the worst scenarios:
username+password+sms = sms || username+password
And the same goes for email instead of SMS as well, in most scenarios.
- 33Backpack33 6y agousername + unique password would be better than all the other options listed. Adding SMS seems to add new points of attack that either hurt the user or just delays the hurting.