3 ms·
last 4 digits of SSN are regularly found in data leaks. what is worst is you CANNOT change it if your data is leaked from 3rd party site. conclusion: NEVER us
by slt2021 3y ago
last 4 digits of SSN are regularly found in data leaks.
what is worst is you CANNOT change it if your data is leaked from 3rd party site.
conclusion: NEVER use phone number as 2FA, Always assume your cell number will be swapped, always use other more secure factor, especially if it has anything to do with money $$$
- pknomad 3y agoDo you mean never use your phone number as 2FA if other 2FA options are not available? Most major retail banks (BofA, Chase, Citi, etc) all offer mobile as the only, if not primary, 2FA option.
- neon5077 3y agoUnfortunately the vast majority of services only support SMS or email 2FA. I've set up a real 2FA app for every site I use that supports it, and that number is four: gitlab, github, discord, and my domain name provider. My bank, my utilities, my insurance, everything only supports SMS if they support 2FA at all. Most just don't.
- slt2021 3y agoemail is not bad option, at least you can harden your email to use normal 2FA instead of pathetic SMS
- elliottback 3y agoCompletely agree using last-4 SSN is terrible, but some light in the tunnel exists. It is possible to change it, although it is as you would expect, quite annoying: https://faq.ssa.gov/en-us/Topic/article/KA-02220 https://faq.ssa.gov/en-us/Topic/article/KA-02220