Twitter’s Decision to Limit SMS 2FA Is Dangerous

rmondello.com

3 pointsalwillis2 comments

If anything, Twitter locking an incredibly insecure method of 2FA behind a paywall is a GOOD thing IMHO, cos it forces users to use a more secure methods instead such as using an authenticator app (Authy et al)

> (Authy et al)

I once had an Authy account and then my phone got lost, along with the SIM, and then I had to contact support to change the number attached to my Authy account! I never want to do that again.

I since ditched Authy and now backup TOTP challenge response QR code seed images with KeepassXC alongside any relevant recovery codes. Then I backup the KeepassXC DB locally and in cloud storage. If my authenticator app gets lost/deleted I can re-spawn the TOTP response in a fresh install of the app (importing TOTP).

Reply on news.ycombinator.com