Embed Notice

I don't get why so many people still think SMS 2FA is more secure than App 2FA.
One involves receiving a magic code from an external source, which nearly anyone can read given the right tools (intercepting SMS...), the other involves using local generation method using a secret key only shown once before, and without any way to guess the code at time t without having the secret key.