3 ms·
The device doesn't need to be internet connected if you use the app. An iPod Touch does the job just as well as SMS, though you need to make sure the times are
by Shank 14y ago
The device doesn't need to be internet connected if you use the app. An iPod Touch does the job just as well as SMS, though you need to make sure the times are synchronized.
- aidenn0 14y agoStill doesn't answer my question. It won't let me turn on 2FA without giving them a phone # that can be used (SMS or voice) to authenticate, which means anyone that can redirect my phone or capture my SMS messages (both fairly trivial in a targeted attack) can bypass 2FA.
- rsingel 14y agoEven if they could duplicate the SMS at that moment, you would still be protected if you use the app.
- galadriel 14y agoYou have to just do that once to activate 2FA. Once activated, switch to mobile app. No one can turn it off without having code and password later. (apart from finding some flaw in system)
- ceph_ 14y agoIt's counter based, not time.