3 ms·
How exactly did they get this person's email password, though? The SIM swap shouldn't be useful unless your first factor is compromised.
by Wowfunhappy 5y ago
How exactly did they get this person's email password, though? The SIM swap shouldn't be useful unless your first factor is compromised.
- db48x 5y agoThey probably didn’t; they probably just reset the password by authenticating using the phone. Using SMS as a second form of authentication is a really bad idea, and password resets of all kinds are usually the weakest point in your account security.
- Wowfunhappy 5y agoSee, that's the real problem though. If you can reset your password via SMS, then SMS isn't a second factor, it's a single factor. And it's a far less secure single factor than a strong and unique password!
- db48x 5y agoAbsolutely! You should definitely check how your email provider handles password resets before you make your decision about what email provider to use.