[speckx]

I was surprised that Bank of America still does SMS based 2FA.

[dmoy]

BoA is one of the very few US banks that do any modern auth - they support fido2 security keys.

Of course effectively 0% of their customers actually use it, and instead rely on sms

[kccqzy]

Huh I set up SMS 2FA for BofA back in 2016 and I never knew they now support fido2.

[dmoy]

They don't let you get rid of sms fallback, so it's not immune to sim theft

It does help vs phishing though