Current Events > Is 2 step verification really make my account safe?

(+) Yeah! (+)

Like my Gmail, Yahoo and PSN
---

aki_sora posted...

Like my Gmail, Yahoo and PSN

Yeah a couple years ago my PSN got hacked. I activated the two step authentication and people were still trying to access my account sporadically afterwards but were unable to successfully log in because I had initiated the two step process.
---

It does make it much more difficult for someone to get into your account.

Without it, the person only needs the password. And that password becomes less secure the more you use it around different services.

With 2FA, you're adding an extra layer of protection to the process. Now, not only do they need the password, they need some way to intercept the code which could require direct access to your mobile device.
---

It is a lot more secure than not having 2FA, but it isnt unbreakable security. There are methods for a dedicated person to clone your phones SIM card and then intercept any 2FA requests coming through that way. But that is far less common than using stolen passwords.
---

Yes, because it relies on the "something you know, something you are, and something you have" principle.

To spoof someone's identity and bypass two of those three factors is pretty hard so long as the back end is secure. Because even if you know someone's password ("something you know"), how will you get their phone/email account ("something you have") or a biometric measure ("something you are")?

Now it's not faultless. A 2FA based around a password and an email account can be compromised if someone can get into your email without much difficulty, hence the move to either using a single phone for authentication or, better, a biometric lockout.

Having a multi-factor authentication like a password combined with an fingerprint scanner/facial scanner that unlocks the authentication app on your phone actually fits all three, which is pretty much faultless. My Microsoft Authenticator app is set up like this (when you need an MFA token, you have to unlock the app using FaceID first to even view the MFA token). I just have to not lose my phone (which a bit of a pain in the ass when it's on the other side of the house but such is life; it's why I both despise and like MFA).
---

xsouljah posted...

aki_sora posted...

Like my Gmail, Yahoo and PSN

Yeah a couple years ago my PSN got hacked. I activated the two step authentication and people were still trying to access my account sporadically afterwards but were unable to successfully log in because I had initiated the two step process.

This exact same thing happened to me. I was getting verification texts daily as someone was trying to access my account. They never could get into it though because I had 2 step on. I never thought it was necessary til someone got ahold of everything.

yeah cause if they don't have your phone then they can't get in. it's nice
---

one time someone got the password to my blizzard account. due to mfa my account was safe, but i was woke up at 2AM by a hacker spamming login attempts and my phone was vibrating nonstop and making notification noises every second for mfa promps
---

Yes, and it also makes it more difficult to recover that account as well.