3 ms·

Since phones are now the primary computing device for most people, is it really a "2nd factor" though?

• ajross 4y ago
  As conventionally defined, yes. The "first factor" is traditionally a password (or in the modern world, maybe password+working_email_address).
  • Y_Y 4y ago
    You are techincally correct, the best kind of correct, but just for balance I should mention that cavaliers like me end up merging the factors by having all their logins saved on their phones (modulo fingerprint prompts etc.).
  • sublinear 4y ago
    Something you have and something you know, yes. But isn't the thing you have supposed to be separate from the client you're using to authenticate? We're talking about the case where the phone is stolen. There's almost no reason to steal an authentication device other than harassment or tactical delay of access.