Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with multi-factor
Search options answers only
not deleted
user 903
a multi factor authentication requires at least two sets of credentials. This is typically something you know (e. g. a password) and something you own (e. g. a token generator or mobile phone), but could also be something you are (a biometric).
6
votes
Accepted
2FA: Difference between Storing Backup Codes & Secret Key
Yes, anyone who has the secret key can use it to generate one-time passwords for your account. It should be treated in the same way as a password for a site that doesn't have 2FA. It's more secure mos …
- 10.3k
0
votes
Are offline OTP systems really secure?
TOTP is mostly a workaround against unsafe user behaviour. What it essentially does is allow websites to require strong random passwords while still being usable, because the passwords are store and a …
- 10.3k
0
votes
Accepted
Authy asks for the recovery password without a reason. Is this normal behavior?
This is normal behaviour, and a sensible idea. If you don't use the password for a year or two, and then suddenly need it, you're quite likely to have forgotten it.
- 10.3k
79
votes
Accepted
Why do apps with phone verification send the user a message, rather than have the user send ...
It's quite easy to send an SMS message that appears to come from the phone number of your choice without actually controlling that number. And so sending an SMS from a number doesn't verify your ID in …
- 10.3k
3
votes
Is 2FA a false sense of extra security on a mobile phone?
No, it’s not as insecure as 1FA. 2FA is about making life inconvenient for an attacker, not for yourself. With 1FA, anyone anywhere in the world can access your bank account if your username and passw …
- 10.3k
8
votes
Accepted
How can I protect my credit card on sites where 2FA is not an option?
There's nothing you can do. Because if it's actually you using the web site, then fraud is obviously not an issue. The 2FA only helps if someone else is using a web site pretending to be you, and so n …
- 10.3k
1
vote
Best practices for storing 2FA recovery codes
I keep mine in an encrypted document stored on iCloud. The iCloud account has two-factor authentication enabled, but I have four devices registered to it, and I think the chances of me losing my lapto …
- 10.3k