Sujet : Re: We wiill send you a code
De : noemail (at) *nospam* none.com (AJL)
Groupes : comp.mobile.androidDate : 11. Jun 2025, 17:03:30
Autres entêtes
Organisation : A noiseless patient Spider
Message-ID : <102c9ch$22mct$1@dont-email.me>
References : 1 2 3
User-Agent : PhoNews/3.13.3 (Android/11)
On 6/11/25 4:03 AM, micky wrote:
In comp.mobile.android, on Mon, 9 Jun 2025 21:12:00 +0200, "Carlos E.R."
<robin_listas@es.invalid> wrote:
>
On 2025-06-09 17:18, micky wrote:
I'm seeing more and more webpages that, after entering my userid, want
to send me a code to log in to the page. For a computer user, this is
just silly, when he could have stored his password so that it pops right
up, without going to read a text or email. And using one's password
always has been the second option
>
This is a fashion of 2FA, if i understand your description.
But why would the person whose account it actually is want to use 2FA,
So a PERP knowing your password can't use HIS device to log into YOUR
account.
when he can just click and his saved password will fill the password
That's the reason for 2FA: More security for YOUR accounts. A password
manager provides convenience and some security with better made up passwords but if your password is ripped off at the website, a fancy long
password won't help much...
field, rather than have them either send a text or email, have to go the
text or email, copy, go back to the webpage, and paste it.
MY accounts only require using 2FA one time per account per device. Once an
account certifies that the device is mine (and not some perp trying to get
in using his device), from that point on no more 2FA is required on THAT
ONE device.
It then depends on the site if a password is still required when using a 2FA
certified device. For me some sites (like Amazon) no longer even require
using a password and others (like banks) still do. But no more 2FA.
There may be some high security sites that REQUIRE using 2FA every time but
I've never seen one. However some sites allow you to set using 2FA every
time if you want the extra security.
He's knows
it's his account, or if he's logging into someone else's account then he
doens't care that it's not his. If they let someone just use a password
and he knows the password, why would he not just use the password? It's
so much simpler and quicker.
So if you're having to use 2FA more than ONCE per account per device, you're
likely doing something wrong, but don't complain, 2FA is a good thing...