Hacker News new | ask | show | jobs
by slow_typist 702 days ago
I think 2FA via texts is better than no 2FA. But only if you do not make the texts world readable.

Apart from that, to me it seems justifiable to follow a risk based approach. Booking systems up to a certain value/amount, fine. Online Banking and health related services, thank you, no.
1 comments
sleepyhead 702 days ago
It's not really 2FA even. More like a magic link (which is what we use for verification via email). The customer has no password, just verifies using a code via sms/email.
link
slow_typist 701 days ago
Passwordless, so to speak. Does it help with conversion rates?
link
sleepyhead 697 days ago
It’s for the booking site so most visitors come to make a booking thus conversion rate would be high generally. We never had passwords there so can’t compare conversion rates.

For signups to our app (to get an account with a booking site) we require a password.

link