4 ms·
They probably didn’t; they probably just reset the password by authenticating using the phone. Using SMS as a second form of authentication is a really bad idea
by db48x 5y ago
They probably didn’t; they probably just reset the password by authenticating using the phone. Using SMS as a second form of authentication is a really bad idea, and password resets of all kinds are usually the weakest point in your account security.
- Wowfunhappy 5y agoSee, that's the real problem though. If you can reset your password via SMS, then SMS isn't a second factor, it's a single factor. And it's a far less secure single factor than a strong and unique password!
- db48x 5y agoAbsolutely! You should definitely check how your email provider handles password resets before you make your decision about what email provider to use.