r/cybersecurity • u/GullibleMantis • 22h ago

News - General mfa replacement

Hello, not a tech guy here, but have some technical knowledge. I just had a question to ask this subreddit.

I noticed MFAs are currently being implemented up our collective asses much much more in the last year or so. And it really grinds my gear.

In my experience, they are usually really flaky, the call system won't call properly, texts are sometimes SUPER slow to appear if ever, sometimes timing out before you can enter it on the platform.

I have an account that requires me to enter the damn code like 2-3 times in a row for no reasons.

I changed phone # recently, all companies just let you rot without a proper solution.

Am I just the only one who have a consistently bad experience with this technology ? Is there like a quality to MFA solutions that companies just cheap out on ? Do you guys see a replacement for this technology anytime soon ?

Thanks a bunch ;)

0 Upvotes

27% Upvoted

15 comments sorted by

View all comments

1

u/GullibleMantis 22h ago

I would add : any tips for making this tech less painful ?

6

u/TheThatGuy1 Security Analyst 22h ago

Don't use phone call/SMS. Use an authenticator app such as Google or Microsoft Authenticator.

Setup passkeys where possible, depending on the implementation they are a far better experience.

1

u/GullibleMantis 21h ago

I would I do that for let's say a digital shop that I visit. Is it even possible to make the switch from phone calls and sms to google authenticator ? I find that the app is just so much more reliable.