2FA text codes get intercepted way too often... switched to an authenticator app 3 months ago

I work at a small real estate office in Austin and we had a phishing scare last quarter where someone spoofed a text from 'our bank' asking for a 2FA code. Turns out SMS codes are pretty easy to intercept with SIM swap tricks. I finally moved our whole team to a Google Authenticator setup for online banking and property management logins. It took me about an hour to get everyone set up on their phones... and now we haven't had any close calls since. Has anyone else ditched SMS codes for something like a hardware key instead?

2 comments

2 Comments

the_sarah2d ago

Wait, aren't you worried about losing your phone or it breaking? I had a friend who used an authenticator app and when her phone died she was locked out of everything for days. SMS codes are annoying but at least they go to your SIM which is tied to your number, not a device you can drop in a puddle.

river_hart182d ago

Totally get the fear @the_sarah. Best practice is to print out the backup codes the app gives you and keep them in your wallet or a safe. That way even if your phone dies you've got a way in.