3 ms·
They still need your password. The SMS alone is insufficient. Supporting SMS as a second factor (whether primary or backup) is perfectly adequate for almost eve
by chrismorgan 5y ago
They still need your password. The SMS alone is insufficient. Supporting SMS as a second factor (whether primary or backup) is perfectly adequate for almost everyone’s threat model, and generally far superior to not supporting it as regards avoiding account lockout. (That’s Fastmail’s position, which I thoroughly agree with.)
- MattPalmer1086 5y agoI agree it's probably better than nothing for many people. It's still pretty much the worst form of 2fa there is, and not nearly as secure as people assume.