Password resets are now the main way accounts get stolen
Problem details
Every service funnels recovery through email or SMS. Compromise one inbox or convince one mobile carrier to swap a SIM, and everything else falls over in sequence.
We added multi-factor authentication to the front door and left the back door on a knock-twice system.
4people relate1comments
Solutions
0
No solutions yet.
Be the first to suggest a solution.
Discussion
1 comment
Sign in to join the discussion.
Sign inAMAlex Mwangi·
A SIM swap took out my email, then everything that recovers through email, in about forty minutes. The strong passwords and authenticator app made no difference at all.
0