I've been mulling over an idea for a while:
A web service that would easily add a second factor of authentication to your existing application's login system.
Thoughts?
A web service that would easily add a second factor of authentication to your existing application's login system.
Thoughts?
In my opinion the best solution for two-factor logins is password plus SMS challenge. It requires a device, but at least it's a device you most likely already have.
The solution might not be as useful in the US with the "pay for receiving messages" stuff, but if the service you're loggin into is important enough (bank etc) most people might not mind.
Most won't, but it at least is an easy way to provide this option.