User Tools

Site Tools


two-factor_authentication

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
two-factor_authentication [2019/09/08 12:51] โ€“ neiltwo-factor_authentication [2022/09/08 09:09] (current) โ€“ neil
Line 71: Line 71:
 First, text messages are not secure, and a sufficiently motivated attacker is likely to be able to access your messages. First, text messages are not secure, and a sufficiently motivated attacker is likely to be able to access your messages.
  
-Second, if someone manages to hijack your phone number (sometimes known as "SIM swapping"), they get all your messages and calls. Irritating at the best of times, but even more problematic if you rely on text messaging to log in to your services โ€” the double whammy of you not being able to log in until you get it fixed, and someone else getting your codes.+Second, if someone manages to hijack your phone number (sometimes known as "SIM swapping"), steal your phone, or simply remove your SIM card, they get all your messages and calls. Irritating at the best of times, but even more problematic if you rely on text messaging to log in to your services โ€” the double whammy of you not being able to log in until you get it fixed, and someone else getting your codes.ย 
 +ย 
 +You can mitigate some of the risk by:ย 
 +ย 
 +  * changing the settings of your phone, so that message content is not available from the lock screenย 
 +ย 
 +  * setting a SIM PIN, different to your device PIN, so that if someone takes your SIM and tries to put it in a different device, they cannot use it until they enter a PIN.
  
 Third, if you are out of signal, you cannot get your code โ€” no good for places with Internet connectivity, but no or poor cellular service. Third, if you are out of signal, you cannot get your code โ€” no good for places with Internet connectivity, but no or poor cellular service.
two-factor_authentication.1567947113.txt.gz ยท Last modified: 2021/07/06 09:26 (external edit)