LogFAQs > #974576608

streamofthesky posted...

I hate 2FA for anything below like online bank account or government websites level of security importance.

And I'm convinced a lot of these sites push it to get your phone number and other info from you under the guise of "security" (only to lack the most basic encryption security themselves and you find out a year later they've been hacked and all your unprotected data has been stolen.... and no, I will NEVER forgive Linked In).

TOTP (e.g. Google Authenticator) does not require a phone and has nothing to do with phones AND is stronger than an SMS authenticator. SMS authentication is the old way of doing it and anyone who is still using it is.

• Not aware of current cybersecurity trends
• Is trying to collect your data.

Furthermore, TOTPs require no internet connection to function and the generation of them are an open standard. They are incredibly safe but vulnerable to MitM attacks (like everything else).