Top 5 reasons not to use SMS for multifactor authentication

Описание: Multi Factor authentication, aka MFA or as we used to call it two-factor authentication, is essential. It means you don’t rely on your password alone for security. That password is something you know, but with MFA you also rely on other factors, like something you are-- your face-- or something you have-- say, a security key.

SMS is the most frequently-used additional factor because almost everybody has it and it’s a little easier to manage for developers. But it’s also the least secure. While it is better than nothing, it’s much more secure to use an authenticator app or a physical security key.

Here are five reasons NOT to use SMS for MFA.