You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser.
Solved Why I prefer physical security keys over SMS for MFA (2FA)
I saw this article today and wanted to share as I was recently involved in a similar discussion on this Forum.
A million two-factor authentication codes sent via SMS passed through an obscure third-party company. Here's how it happened and why it's a problem.
www.zdnet.com
I know that sometimes, we users are not given a choice about whether or not to receive SMS text messages to our devices for MFA authentication.
This post is more about raising awareness for everyone.
-
- OS
- Windows 11 Pro 26100.4652
- Computer type
- PC/Desktop
- Manufacturer/Model
- Home Built
- CPU
- Ryzen 5 5600G
- Motherboard
- ASUS X470 Prime Pro
- Memory
- 32GB
- Monitor(s) Displays
- Alienware 2518HF
- Screen Resolution
- 1920 x 1080
- Hard Drives
- Boot: NVME WDC WDS500G; ASUS M.2 Riser card with 3 additional NVME drives
Various Internal SDD (Samsung and WDC) and HDD drives mostly Western Digital
- PSU
- Seasonic Focus Gold 650W
- Case
- Corsair 200R
- Cooling
- Noctua PWM fans x 3
- Keyboard
- Corsair K60 SE Pro
- Mouse
- Corsair Dark Core RGB Pro SE
- Internet Speed
- 500/500
- Browser
- MS Edge
- Antivirus
- Malwarebytes Premium
Well-known member
Pro User
VIP
But 2FA, on a phone, does not have to use SMS. Authenticator apps can generate a code with no SMS.
-
- OS
- Windows 11 Pro 24H2 26100.4484
- Computer type
- Laptop
- Manufacturer/Model
- Acer Swift SF114-34
- CPU
- Pentium Silver N6000 1.10GHz
- Memory
- 4GB
- Screen Resolution
- 1920 x 1080
- Hard Drives
- SSD 2TB
- Cooling
- fanless
- Internet Speed
- 150 Mbps
- Browser
- Brave
- Antivirus
- Webroot Secure Anywhere
- Other Info
- System 3
ASUS T100TA Transformer
Processor Intel Atom Z3740 @ 1.33GHz
Installed RAM 2.00 GB (1.89 GB usable)
System type 32-bit operating system, x64-based processor
Edition Windows 10 Home
Version 22H2 build 19045.3570
-
- Operating System
- Windows 11 Pro 23H2 22631.2506
- Computer type
- Laptop
- Manufacturer/Model
- HP Mini 210-1090NR PC (bought in late 2009!)
- CPU
- Atom N450 1.66GHz
- Memory
- 2GB
- Browser
- Brave
- Antivirus
- Webroot
Well-known member
Member
Thread Starter
But 2FA, on a phone, does not have to use SMS. Authenticator apps can generate a code with no SMS.
True.
Excellent point!
-
- OS
- Windows 11 Pro 26100.4652
- Computer type
- PC/Desktop
- Manufacturer/Model
- Home Built
- CPU
- Ryzen 5 5600G
- Motherboard
- ASUS X470 Prime Pro
- Memory
- 32GB
- Monitor(s) Displays
- Alienware 2518HF
- Screen Resolution
- 1920 x 1080
- Hard Drives
- Boot: NVME WDC WDS500G; ASUS M.2 Riser card with 3 additional NVME drives
Various Internal SDD (Samsung and WDC) and HDD drives mostly Western Digital
- PSU
- Seasonic Focus Gold 650W
- Case
- Corsair 200R
- Cooling
- Noctua PWM fans x 3
- Keyboard
- Corsair K60 SE Pro
- Mouse
- Corsair Dark Core RGB Pro SE
- Internet Speed
- 500/500
- Browser
- MS Edge
- Antivirus
- Malwarebytes Premium
Well-known member
Pro User
VIP
There are many ways to use 2FA that are a lot easier and cheaper than a key/dongle.
-
- OS
- Windows 11 Pro 24H2 26100.4484
- Computer type
- Laptop
- Manufacturer/Model
- Acer Swift SF114-34
- CPU
- Pentium Silver N6000 1.10GHz
- Memory
- 4GB
- Screen Resolution
- 1920 x 1080
- Hard Drives
- SSD 2TB
- Cooling
- fanless
- Internet Speed
- 150 Mbps
- Browser
- Brave
- Antivirus
- Webroot Secure Anywhere
- Other Info
- System 3
ASUS T100TA Transformer
Processor Intel Atom Z3740 @ 1.33GHz
Installed RAM 2.00 GB (1.89 GB usable)
System type 32-bit operating system, x64-based processor
Edition Windows 10 Home
Version 22H2 build 19045.3570
-
- Operating System
- Windows 11 Pro 23H2 22631.2506
- Computer type
- Laptop
- Manufacturer/Model
- HP Mini 210-1090NR PC (bought in late 2009!)
- CPU
- Atom N450 1.66GHz
- Memory
- 2GB
- Browser
- Brave
- Antivirus
- Webroot