2FA without SMS?

iyanmv

Hello,

I’m surprised Swisscom only offers SMS as 2FA. Not only they don’t give an alternative, but in the help site they say the following:

For security reasons?! Okay, that is terrible. SMS as 2FA is known to be the weakest form of 2FA. It offers almost no additional protection compared to not having 2FA in the first place.

Why not add, like many other providers and websites, support for hardware tokens and HOTP/TOTP?

r00t

Hi @iyanmv

100% agree with you, TOTP would solve plenty of issues (like multi-people access etc.)

Sadly, it looks like this is not a priority for Swisscom, as we have been asking for it for quite some time now.

Some say it’s because Swisscom wants to push Mobile-ID, but that is pure speculation.

Best,

r00t