[rsync]

"Anyway it's probably good practice to recycle your number every few years, and not use it for 2FA to make switching numbers a lot easier."

Ironically Twilio of all places forced SMS 2FA on all accounts earlier this year.

As in, one day you could no longer log into your twilio account without giving them a phone number. You are locked out until you do.

Ironic in a few ways ...

First, twilio numbers are not mobile numbers - they are voip numbers - and cannot be used for most 2FA authentication services because they cannot receive messages from short codes. So it's ironic that twilio forces you to use a non-twilio number for their 2FA.

Second, many twilio use-cases (like mine) involve building a twilio infrastructure to replace my existing phones/numbers ... and now that is broken from the bottom up because I have to use a mobile phone with a fixed provider just to use twilio.

The bottom line is: none of this is for me or my safety and security. Twilio has a spam problem and that spam problem is very hard to solve. Forced pairings of physical phones and SIM cards is just a desperate way to throw sand in those gears to slow it down a little bit.

[QUFB]

I have had a Twilio account for years, and have always used the proprietary MFA implementation from their Authy app. I don’t remember being forced to switch to SMS MFA.