Stephen Rees-Carter • 4/14/2021

The Security Risk of SMS Two Factor Authentication

This article clarifies a common misconception in cybersecurity, arguing that SMS-based Two-Factor Authentication (2FA) is often unfairly maligned. The real security risk lies in systems using SMS for account recovery, which bypasses passwords entirely, making it single-factor authentication. The author details the attack vectors for each method and discusses the trade-off between security and usability, especially for non-technical users.

0 comments

#authentication #cybersecurity #2fa