Microsoft warns against SMS, voice calls for multi-factor authentication: Try something that can't be SIM swapped

Microsoft warns against SMS, voice calls for multi-factor authentication: Try something that can't be SIM swapped

Microsoft on Tuesday advised internet users to embrace multi-factor authentication (MFA)... except where publicly switched telephone networks are involved.


Multi-factor authentication, for those who haven't been paying attention, involves adding one or more additional access requirements to password-based authentication. So an online bank, for example, might send a text message to the mobile phone number associated with a given account to make it more likely that the person entering the account password is authorized to access the account.


The technique isn't foolproof though it offers additional defense against attackers who gain access to, or guess through various techniques, the password for a victim's online account. MFA can also be used in conjunction with a password manager: think of multi-factor authentication as an additional layer of protection.


In a blog ..

Support the originator by clicking the read the rest link below.