Hot take: two-factor authentication via SMS is better than nothing but I think app-based is overhyped

I got hit with a phishing attempt last month where someone cloned my bank's login page. SMS codes saved me because the fake site couldn't forward those. But my buddy argues app-based TOTP codes are way safer since SMS can be intercepted. I've used both for 2 years and never had a SMS fail, but I get the theory behind apps. Which route do you lean toward for everyday accounts like email or social media? Has anyone actually had SMS get compromised on them?

1 comments

1 Comment

king.ruby7h ago

Oh totally feel you on that phishing scare, that's rough. I had someone try to get into my Instagram with a fake login link last year and my SMS code stopped it cold too. Never had SMS compromised on me either, so I just stick with it for the simple stuff like social media and email since it hasn't let me down.