4 ms·
Wondering if this isn't related to the LastPass breach? Paypal's 2FA is a bit of a joke. IIRC (this was quite some time ago) when I went to initially setup 2FA
by scrps 4y ago
Wondering if this isn't related to the LastPass breach?
Paypal's 2FA is a bit of a joke. IIRC (this was quite some time ago) when I went to initially setup 2FA SMS was the only option, eventually they added support for authenticators but you can just click get a text instead of the authenticator. Last time I checked there was no way to tell paypal to only accept OTPs from an authenticator.
- troymc 4y agoProbably not. "Credential stuffing" means getting a big list of formerly-leaked usernames and passwords and trying them everywhere. It mainly targets people who use low-entropy passwords or who reuse the same password on multiple sites.