vanguard_u2f

4 ms·

1. 1.▲
   by vanguard_u2f 8y ago

   That's my point. Adding an SMS number to your account reduces the security of your account to one-factor SMS authentication.
2. 2.▲
   by vanguard_u2f 8y ago

   I compromise your SMS. I initiate password recovery, and tell Vanguard "I forgot my password -- but look! It's still me! I can receive SMS challenges!"
3. 3.▲
   by vanguard_u2f 8y ago

   Vanguard requires you to enable fallback SMS 2FA before you can enable U2F, which results in a net decrease, rather than increase, in account security.