Unpopular take: 2FA texts are worse than no 2FA at all

I work in IT support and I've seen three people get sim swapped this year alone because everyone pushes SMS codes. Why does nobody talk about how easy it is to hijack those compared to just using an authenticator app? Am I the only one who thinks text-based 2FA gives a false sense of security?

3 comments

3 Comments

taylor1228d ago

Most 2FA app codes still work offline while texts don't.

parker18328d ago

Oh man, that reminds me of the time I was hiking in a dead zone and my phone bricked, but I still got into my email with an offline 2FA code. It's a lifesaver when you're out of service, huh?

morgan_martinez24d ago

Yeah I read somewhere that most authenticator apps can generate codes offline since they use a time-based algorithm. Definitely helps when you're stuck without service lol.