16/01/2024
“…Turning on two-factor hashtag for your online accounts can be a pain. But like going to the dentist, it’s just something you have to do.
…Two-factor authentication ("2FA") acts like an additional lock on your door.
Your password opens the first, but to get past that deadbolt, you need another key: Typically it’s a code texted to your phone or generated by an app, but sometimes it’s an on-phone prompt or even a physical USB hashtag key.
…an authentication app, such as Google Authenticator or Twilio’s Authy. They generate time-based, constantly changing codes you enter to log in.Security experts recommend apps over text messages because, in the case of high-value targets, the phone number itself can be hijacked via the wireless service provider.
…The most secure type of two-factor is the physical security key, such as Yubico’s $55 YubiKey 5C NFC. When you log into a protected account, you tap it against your phone or insert it into your phone or laptop’s USB port. If you go this route, you should have two or three, in case one gets lost. Security keys are a strongly recommended protection for people at higher risk, such as high-net-worth individuals, social-media influencers and public figures…”
Full article:
The SEC’s X account breach and last year’s 23andMe hack show why everyone needs a second security layer
