This is an archived community post.

This post is no longer open for new replies - but we'd still love to hear from you! Share your feedback with our team via our Feedback Form.

Need help getting started? Check out this article for step-by-step instructions on submitting feedback through the form.

Adding a phone to 2FA is a bad idea

Dingus

When I logged in to the Linux app just now I was prodded to add a phone number in addition to my 2FA settings. This is an extremely bad idea because adding a phone makes the account vulnerable to SIM hijacking, which it wouldn't be if you just use the 2FA app/backup codes

Although not ideal, it is generally better to use an email address as the destination of a back up code

0

Comments

1 comment

Date Votes
  • $h4døw__Hunt3r

    Depends on how bad the sim provider then yes i agree, i heard that some are encrypted in a way so that once a hyjack is detected then the system does everything to remove the hacker, but hey not proven to be done yet so I can't say anything

    0