Confused: Is TOTP only option for 2FA? No text msg option?

  • Resolved jsafire

    (@jsafire)


    3 years, 5 months ago

    I am the developer and admin of a site. As best I can tell, WF does not support 2FA via text message; is that correct? My client needs admin access for Woo-related tasks and issues. She has no idea how to use TOTP and will likely tell me to turn it off. I realize text message-based 2FA is not as secure as TOTP, but it is better than nothing. Isn’t it?

    Thanks,
    Jeff
    –––––––

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @jsafire, thanks for getting in touch.

    We do not support SMS for 2FA as we don’t believe it to be as secure: https://krebsonsecurity.com/2021/03/can-we-stop-pretending-sms-is-secure-now/

    I’m sure you’re aware of the increasing importance of 2FA with many websites now, but I agree that it can be tough with less technical users to make it sound attractive. We have no official association with Authy but I find an app such as that where the codes can be recovered should their main device be broken/lost/stolen is an easier “sell”.

    Thanks,

    Peter.

Viewing 1 replies (of 1 total)
  • The topic ‘Confused: Is TOTP only option for 2FA? No text msg option?’ is closed to new replies.

Tags