All Questions

Tagged with
Filter by
Sorted by
Tagged with
1
vote
3answers
148 views

Can I get 2FA for my private domain e-mail account? [closed]

Is it possible to somehow get 2FA for my e-mail accounts even if they're hosted on custom / private domains? (e.g mymail@mycooldomain.com and not gmail)
4
votes
3answers
403 views

Is receiving an OTP via email any more secure than receiving it via SMS?

I understand that getting OTPs via email and SMS are the weakest forms of 2FA, but given a situation where these two are the only options for 2FA, is email any better than SMS? (Assuming the email - ...
9
votes
4answers
4k views

Does IMAP/POP3/ASP undermine Two-Factor Auth?

When I log in to hotmail or Google or posteo I can only log in using the 2FA that I have set up. However, each provider seems to have an alternative for apps that do not auth via a web client. ...
1
vote
3answers
1k views

Emailing 2-Factor Authentication Secret Key

In our PHP web application we have included Two-Factor authentication. Users have a one-time secret key generated which they then enter (or scan a QR code) into the Google Authenticator app. The ...
7
votes
1answer
787 views

If my phone for two factor authentication is stolen, can the attacker access my account via an email password reset?

Suppose I setup an online account with 2FA on my phone, and an attacker gains access to my phone. My phone is logged into my email account. The attacker knows my online service's account username or ...
1
vote
2answers
365 views

Is phone-based two-factor authentication significantly more secure than email authentication?

Phone-based authentication must be more secure than email-based, because it is more difficult to take control of a phone than an email account. Should I use phone authentication over email ...
6
votes
3answers
1k views

Two-Factor Authentication: When is it worth it?

I was reading this article, and it triggered the question: Why not use two factor authentication? In his case, it both possibilities were enabled anyway, so this looks to me like it's two attack ...
9
votes
6answers
4k views

POP3/IMAP Stronger Authentication

We recently deployed a two-factor-authentication solution in order to strength logon to our web applications (one of them is web based mail, Microsoft outlook web access) Most of the users who have ...
2
votes
1answer
135 views

Should the email server/application be protected by 2 factor authentication? What applications should be protected?

When should email be protected by 2 factor authentication? Suppose a given company is in an industry where two factor authentication is offered to some or all of its clients. Does this mean that it ...