Hacker News new | ask | show | jobs
by rsync 1326 days ago
Don't use your personal mobile phone for 2FA.

Use a "2FA Mule" that is only for that purpose:

https://kozubik.com/items/2famule/

I have the ringers silenced on mine so I wouldn't know if they got any spam calls ... and I assume they do ...
1 comments
Dave_TRS 1326 days ago
Google Voice is free and will forward SMS's to email, which can then be set up with rules to various other emails. Most banks accept google voice numbers

Twilio numbers are a dollar a month and will also forward to email or you can log into the twilio web interface to pick up sms codes if needed. Rejected by more places the demand 2FA

link
runevault 1326 days ago
Some services don't allow GVoice 2fa. I tried it for instagram because I refuse to give Facebook my real number and they rejected it.
link
dpkirchner 1326 days ago
Same, although my goal was to use a Google Voice number that could be shared amongst a team, for integrating with Facebook's APIs.
link
realAzazello 1323 days ago
Agreed. Definitely some USA banks do not (with one of my accounts, neither the SMS nor the automated call would come through the GV number), and although a few years since last I tried, craigslist would not accept GV for account verification.
link
rsync 1326 days ago
"Google Voice is free and will forward SMS's to email ..."

...

"Twilio numbers are a dollar a month ..."

I wanted very much to keep my telephony within twilio and maximize the mini-telco that I built for myself there ... however almost zero 2FA requirements can be fulfilled with "voip" numbers that are not honest-to-god mobile tagged phone numbers.

That's the whole point of the 2FA Mule, etc.

link