Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It's inconvenient, SMS 2FA is arguably security theater, and redundant with a real password manager. Hopefully Passkeys kills 2FA for most services.


SMS 2FA is the devil. It’s the reason I haven’t swapped phone numbers even though I get 10-15 spam texts a day. The spam blocking apps don’t help and intrude on my privacy.


FYI github already supports using passkeys as a combined login/2FA source. I haven't used my 2FA codes for a while now.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: