It's better to use an authenticator app - most major online services support Google Authenticator, and it works on both iOS and Android - or a USB security key, such as those made by Yubico, which cost as little as $20. That's because it's too easy to intercept codes sent via the regular SMS text-message standard, and too easy for crooks to steal your mobile phone number by having it transferred to their SIM cards. Second, it's becoming increasingly clear that texted codes aren't the best options for 2FA. Recovering your account once it’s locked behind two layers of security that a criminal set up instead of you is not impossible, but it’s an awful lot more difficult than just entering a second code every once in a while. If you don’t, a thief who gets ahold of your password can, and probably will. Two words of warning: First, even if you find 2FA cumbersome, you should still activate it wherever you can.
0 Comments
Leave a Reply. |