Bruce Schneier personal blog
NIST is No Longer Recommending Two-Factor Authentication Using SMS
NIST is no longer recommending two-factor authentication systems that use SMS, because of their many insecurities. In the latest draft of its Digital Authentication Guideline, there’s the line: [Out of band verification] using SMS is deprecated, and will no longer be allowed in future releases of this guidance.
- Points
- 0
- HN comments
- 0
- Submissions
- 0
- Cited by
- 10 commenters
Cited in comments
Linked from 10 Hacker News comments by 10 different people, from Oct 2016 to Apr 2026.
Most recent:
- panny · Apr 9, 2026
- jnwatson · Aug 3, 2023
- O__________O · Jun 24, 2022
- robin_reala · Mar 15, 2022
- hprotagonist · Sep 11, 2019
