I'm trying to set up two-factor authentication for all my accounts. Some of them, unfortunately, only support SMS.

In that case, which of these options would be more secure?

  1. SMS
  2. Google Voice (which has a strong and unique password, guarded with a physical security key).

Are there any other ways I can make these accounts more secure?

  • Please do not add "thank yous" or sign-offs, or salutations. They are mostly seen as noise.
    – schroeder
    Aug 2 '21 at 19:29
  • probably google voice, since you can reach it over the web. SMS has a few more outsider interception potentials. Then again, if someone's owned your PC, which is common, then SMS would be better.
    – dandavis
    Aug 2 '21 at 22:44

Any form of 2-Factor Authentication adds account security. Verification codes sent by texts or calls can be vulnerable to phone number-based hacks. Attackers can get your Google Voice password as well as your normal account password. They could then get past the two-factor authentication.

If you always access Google Voice from a separate system you'd still technically be two-factor though.

  • "Attackers can get your Google Voice password as well as your normal account password." -- how? I'm not sure you have answered which is better.
    – schroeder
    Aug 2 '21 at 20:06
  • You can put your whole Google account behind 2FA, including access to SMS or MMS messages in Voice. Assuming this was a more secure 2FA than an SMS by self (which is subject to things like SIM hijacking), what's the problem? Aug 2 '21 at 20:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.