you are viewing a single comment's thread
view the rest of the comments
[–] 14 points 4 months ago* (1 child)

A big feature of sms is that it's not encrypted. Every tower that recieves the message is trusted to forward it unaltered. This is one attack avenue.

https://www.helpnetsecurity.com/2020/11/12/sms-voice-mfa/

Things like the following are generally recommended though Microsoft recommends using their app. https://www.yubico.com/

I should have clarified that sms 2fa is insecure not 2fa.

  • source
  • parent
  • hideshow 1 child comment