2FA in 2020 and Beyond
summary
Data show tradeoffs: SMS is easy to onboard but vulnerable to SS7 and SIM‑swap; Google finds SMS blocks 100% of automated bots, 96% of bulk phishing and 76% of targeted attacks. TOTP (soft tokens) is offline and standardized but leaks if the shared secret is exposed and many users mistype expiring codes. Push and WebAuthn/U2F are fastest and more phishing‑resistant (push adds ~13 minutes saved yearly, U2F ~18) but need apps or $50 hardware keys and better onboarding. Support multiple methods and prioritize clear setup to raise adoption.
AI-written summary · about
chapters (8)
- 0:00Start
- 4:20SMS One-time Passwords
- 6:33Soft Tokens (TOTP)
- 8:37Pre-generated Codes
- 9:45Push Authentication
- 12:06U2F / WebAuthn
- 22:27ENABLE 2FA
- 22:52MEASURING SUCCESS
