Hacker News Reader

SMS-based two-way login would be a better way to do 2FA.

Think of it from the user perspective - now they have to download and use yet another app on their cellphone just to log in.

Yes, I am aware of SMS's vulnerabilities - but the weakest link is always the user.

>Yes, I am aware of SMS's vulnerabilities - but the weakest link is always the user

Or the phone provider's call center employee who gets tricked into helping a bad actor perform a sim swap. I pray you're never in charge of my data.

They'd still have to have your vault password.