1

The Sprint chat guy asked for my sim card number (ICCID) and I'm a little concerned about how sensitive it is. One possibility I can think of is being able to intercept SMS 2-factor Auth.

1
  • 2
    That's why SMS 2FA is not considered a secure way to implement 2FA
    – schroeder
    Jul 13, 2017 at 5:56

1 Answer 1

3

The really secret stuff is stored inside of the SIM card in the form of an authentication key. The ICCID is not really very secret at all, it just uniquely identifies the SIM card but provides no way to perform the authentication process without the authentication key.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .