Why Using SMS Authentication for 2FA Is Not Secure

Two-factor authentication (2FA) is now a part of daily life, and most of us have had first-hand experience with SMS authentication. You enter your password, then you get a prompt to enter a code or pin that’s sent to your phone number. After you type in the code, you’re in. Simple, right?

We all have access to cell phones, so it’s no surprise that SMS two-factor authentication is one of the most widespread types of multi-factor authentication (MFA). You don’t need any apps or digital keys, and it’s not tied to a specific ecosystem. Unfortunately, it’s also not a secure MFA method (and Microsoft agrees).

Four Ways SMS Authentication Opens Your Organization to Risk

The nature of SMS itself opens up your organization to a

Article source: https://securityboulevard.com/2021/12/why-using-sms-authentication-for-2fa-is-not-secure/