Hacker News new | ask | show | jobs
by toddh 1928 days ago
How about a code delivered through SMS? Especially for mobile apps?
1 comments
borplk 1926 days ago
Same problem. A good login mechanism needs to rely on a "previously agreed upon" mechanism to perform the login and not break because an SMS or email is delayed. A password works this way. TOTP/HOTP 2FA also works this way.
link