3 ms·
My bank offers 3 choices for MFA; not sure which of #1 and #2 is more secure: 1. Password + SMS one-time-password 2. 4-digit pin + 6-digit TOTP 3. No MFA Th
by aidenn0 3y ago
My bank offers 3 choices for MFA; not sure which of #1 and #2 is more secure:
1. Password + SMS one-time-password
2. 4-digit pin + 6-digit TOTP
3. No MFA
They do, at least, offer the option of disabling automatic password-resets via SMS code, but I know from experience that you can authenticate yourself to a CS rep with just name, SSN, and a SMS code, and presumably a CS rep can reset your password.