I refuse to have a phone line. I only get one for a month when I’m looking for a job. Got tired of paying a subscription fee just to get spam calls. All my communication is done through messaging apps and the only time I don’t have access to wifi is when I’m driving.
That still requires getting personal information about the user, which is often enough without 2FA. 2FA still makes it more secure than not having it. It’s still a vulnerable step though, so users should be aware of that.
Just a heads up, you can get a free phone number from Google, and probably other providers. If you’ve got a computer of some kind and an internet connection, you can make calls and texts from there. If that’s all you’re getting a phone for, don’t bother with the actual device.
I refuse to have a phone line. I only get one for a month when I’m looking for a job. Got tired of paying a subscription fee just to get spam calls. All my communication is done through messaging apps and the only time I don’t have access to wifi is when I’m driving.
And because SMS 2FA is actually opening a common attack vector. I have yet to find a credit union I qualify for that uses TOTP or Yibikey.
That still requires getting personal information about the user, which is often enough without 2FA. 2FA still makes it more secure than not having it. It’s still a vulnerable step though, so users should be aware of that.
Start talking to someone at the credit Union. They are run by people, you might be able to convince them the risk and implement a safer method
Just a heads up, you can get a free phone number from Google, and probably other providers. If you’ve got a computer of some kind and an internet connection, you can make calls and texts from there. If that’s all you’re getting a phone for, don’t bother with the actual device.
https://support.google.com/voice/answer/115061?hl=en&co=GENIE.Platform%3DDesktop