• Latest
  • All
  • How To
WhatsApp Two Step Verification

Beyond Passwords: All You Need to Know

April 18, 2022
SMS

Kenyans Ditch SMS in Favor of WhatsApp and Chat Apps

July 1, 2025
DeepSeek_vs_ChatGPT

Hackers Build Malware That Tries to Reprogram AI Security Tools

July 1, 2025
Satellite Internet

Satellite Internet in Kenya Records 9.9% Decline in Users

July 1, 2025
Safaricom Ethiopia Celebrates Big Win with 10 Million Customers

Safaricom Ethiopia Celebrates Big Win with 10 Million Customers

July 1, 2025
DHgate Tablet Cases deals
Mobile Money

Kenya Hits 45 Million Mobile Money Users With M-Pesa in the Lead

July 1, 2025
tackling Bank Fraud, Sextortion, and Ransomware in Kenya

Kenya Facing Rise in Cyberthreats from Bank Fraud, Sextortion, and Ransomware

July 1, 2025
Kenya cyber threats 2025

Kenya Detects Over 2.5 Billion Cyber Threats in Three Months

June 30, 2025
Which ISP is best in Kenya

Kenya’s Best ISP: Faiba Claims the Crown for Fastest Internet

June 30, 2025
Cars in port awaiting clearing

Relief for Kenyans as Court Blocks KRA Tax Increase for Imported Cars

June 30, 2025
kenya nil returns process

KRA Extends Tax Return Deadline After iTax System Crashes

July 1, 2025
the process of setting up an Internet service provider (ISP) in Kenya

Airtel Rises While Safaricom Drops in Network Quality Scores

June 30, 2025
google gmail

Google Rolls Out AI Cleanup Tool on Web for Messy Gmail Inboxes

June 30, 2025
Techweez | Tech News, Reviews, Deals, Tips and How To
  • News
  • Entertainment
  • Reviews
  • Features
  • Editorial
No Result
View All Result
Techweez | Tech News, Reviews, Deals, Tips and How To
  • News
  • Entertainment
  • Reviews
  • Features
  • Editorial
No Result
View All Result
Techweez | Tech News, Reviews, Deals, Tips and How To
No Result
View All Result

Beyond Passwords: All You Need to Know

George Kamau by George Kamau
April 18, 2022
in How To, News
Reading Time: 5 mins read
248
15
WhatsApp Two Step Verification

2FA also known as 2-factor authentication fortifies passwords with a second piece of information which involves a one-time passcode being sent at the time of login.

Maintaining the security of your online accounts and ensuring your personal data remains private has become paramount in recent years following data breaches and password leaks from targeted attacks by hackers.  2FA has now the trend to protect yourself in case your passwords get compromised.

The logical step is setting up either:
• SMS-based 2FA where you give platforms your phone number so they can send you text with that contains the One Time Password or
• TOTP-based 2FA (Time-based One-Time Password algorithm) where you’re asked to scan a QR image using a specific smartphone application such as Authy or Google Authenticator app. These apps continuously generate the One Time Password for you.

The case for the SMS-based 2FA

This method is the simplest and more adoptable for most users.

The case against SMS-based 2FA

The SMS-based 2FA has its downfalls such as waiting for the text every time you log in among other important security issues as it can be spoofed easily.

Just last week, it was found that Facebook was using the number you provided the platform with to protect your account but the social media giant used the number for ad targeting purposes and it can also be looked for and you can’t remove it.

Even scarier it’s that it’s easy to intercept the 2FA codes. In Germany, attackers used SS7 vulnerabilities to get user’s codes that were later used to drain the bank accounts of the victims. The same flaw affected a UK bank too early this year.

The recent incident in Kenya where malicious people swapped your SIM card without your consent is also a scary if you only rely on texts.

Telcos need to increase the security of their customer’s numbers and take measures when they notice any tampering to make it harder to exploit text messages.

Why you should still use SMS

This doesn’t mean, you shouldn’t use it. It’s the easiest 2FA to set up and yes it’s not the most secure but it’s the first step to securing your accounts, and a great one at that.

The case for authentication apps

Authentication apps are the true authentication as the TOTP method creates a one time password on the user side instead of server-side through the app.

There’s a ton of apps out here to manage your 2FA logins. Here are the popular ones:

Microsoft Authenticator – it’s a free 2FA app that will link to your online accounts with a QR code scan

Google Authenticator – this is the best and easiest one to use

Authy – This is an alternative to Google Authenticator app but with more added features such as multiple device support for those who frequently change devices via a cloud backup

The desktop, Android and iOS apps let you search for tokens by name, display tokens as a list or grid view, greater device information so you can view and remove unused apps. You also get push authentication support for websites that have implemented it.

It’s best to install the app on your phone and desktop or another device so that when the tokens are synched to the Authy Cloud, they automatically sync. This is so when an attempt to install another instance of Authy, you get notified via the other app as Authy checks the new device against an existing device they already trust.

Once this is done, go ahead and turn off the apps multi-device feature so that no additional apps are installed.

Most sites will suggest Google Authenticator app for 2FA but you can easily substitute that for Authy.

This site has a comprehensive list of services that offer 2FA support. It also shames sites that don’t.

2FA apps vulnerability.

Most sites have a logic flaw vulnerability that let you log in without knowing the current password. It works for when you’re trying to change your password while being in the process of logging in in the 2FA login page. Google fixed this issue. Instagram and Microsoft are still vulnerable. Read all about it here.

Conclusion

Consumers are becoming more aware of 2FA and moving beyond password-only logins as there’s been a 538% increase in users enabling 2FA from 2015 to 2017.

For sites that don’t allow 2FA via authenticator apps, SMS based 2FA will work just fine, but if there’s an option for app based 2FA, use that.

It is now becoming important and difficult to protect your online and it’s imperative we talk about the pros and cons of all the tools we’re using.

Hackers will go the extra length to get access to your personal data. Passwords can be leaked or easily be figured by malicious actors so it’s high time to protect your accounts with 2FA as an additional safety measure.

2FA will add the inconvenience of having another added step to your login process buts it’s worth it, it’ll give you peace of mind.

Articles in this stream

Here’s how to protect your privacy and stay secure on:

  • Facebook
  • Twitter
  • Instagram
  • WhatsApp
  • Google, Microsoft, Apple, Linkedin, Yahoo, and Amazon
Tags: FacebookInstagramMicrosoft
SendShare147Tweet92
George Kamau

George Kamau

I brunch on consumer tech | [email protected]

Related Posts

Facebook

New Facebook AI Tool Can Access Private Images on Your Phone

June 30, 2025
Windows 11 25H2

Microsoft Confirms Windows 11 25H2 As the Next Big Upgrade

June 30, 2025
Counterfeit Products Infiltrate Kenya's Online Market

Counterfeit Goods Flood Kenyan Online Shops Like Jumia and Facebook

June 29, 2025
Togo Cracks Down on Social Media as Protests Demand Leader's Resignation

Togo Shuts Down Social Media Access

June 29, 2025
Windows Blue Screen of Death

Microsoft Is Retiring the Iconic Blue Screen of Death After Nearly 40 Years

June 27, 2025
Microsoft AI for Good Lab tool GIRAFFE

How Microsoft’s AI for Good Lab Is Helping Save Giraffes from Extinction

June 20, 2025

Latest

SMS

Kenyans Ditch SMS in Favor of WhatsApp and Chat Apps

July 1, 2025
DeepSeek_vs_ChatGPT

Hackers Build Malware That Tries to Reprogram AI Security Tools

July 1, 2025
Satellite Internet

Satellite Internet in Kenya Records 9.9% Decline in Users

July 1, 2025
Safaricom Ethiopia Celebrates Big Win with 10 Million Customers

Safaricom Ethiopia Celebrates Big Win with 10 Million Customers

July 1, 2025
Mobile Money

Kenya Hits 45 Million Mobile Money Users With M-Pesa in the Lead

July 1, 2025
tackling Bank Fraud, Sextortion, and Ransomware in Kenya

Kenya Facing Rise in Cyberthreats from Bank Fraud, Sextortion, and Ransomware

July 1, 2025

Best devices

budget smartwatches 2025

Best Budget Smartwatches To Buy in Kenya 2025

February 13, 2025

Best Infinix Smartphones To Buy in Kenya 2024

February 13, 2025

Best Laptops for Battery Life in 2024

August 21, 2024

Best “Battery Warrior” Smartphones To Buy in 2024

August 22, 2024

Kenyans Ditch SMS in Favor of WhatsApp and Chat Apps

July 1, 2025

Hackers Build Malware That Tries to Reprogram AI Security Tools

July 1, 2025

Techweez is a fast growing influential source of technology news, reviews and analysis by leading tech geeks in the industry.

Follow Us

Editorials

Abductions and Arrests! Kenyan Government’s Fear and Hate of X Users Makes No Sense

Actors and Film Crews Are Worried About Veo 3 Taking Their Jobs

Samsung QLED TVs Now Officially Certified for Real Quantum Dot Technology

Trump’s Tariffs Will Be the End of Affordable Tech

5 Ways to Prep Your Tech for Resale

The Weaponization of PDFs: How Cybercriminals Are Exploiting a Trusted Format

More News

Kenya Detects Over 2.5 Billion Cyber Threats in Three Months

Kenya’s Best ISP: Faiba Claims the Crown for Fastest Internet

Relief for Kenyans as Court Blocks KRA Tax Increase for Imported Cars

KRA Extends Tax Return Deadline After iTax System Crashes

Airtel Rises While Safaricom Drops in Network Quality Scores

Google Rolls Out AI Cleanup Tool on Web for Messy Gmail Inboxes

  • Terms Of Use
  • Techweez Brand
  • Privacy & Policy
  • Contact Us

© 2024 Techweez - Palahala Media Group may earn a commission when you buy through links on our sites.
A Palahala Media Group Brand. All rights reserved.
.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

Techweez | Tech News, Reviews, Deals, Tips and How To
Crunchy Cookies 🍪 Ahead!

Hey there! Just a heads-up: we're big fans of cookies - both the digital and edible kind! 🍪 We use our cookies and some from third parties to ensure your browsing experience on our site is smooth sailing and secure.

 

But wait, there's more! We also use cookies to gather stats and insights on how you navigate our site. It's like getting a behind-the-scenes peek at your digital adventures!

 

Don't worry, you're in control. You can adjust your cookie settings anytime to suit your preferences. Feeling curious? Dive into our Privacy Policy for all the juicy details. Happy browsing! 🚀

Functional Always active
Listen, this legal stuff is about as exciting as watching paint dry. But it basically says we only use your stuff for what you asked us to do, and nobody else gets to peek!
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
It's those sneaky cookie crumbs websites leave behind to count visitors, like counting ants at a picnic! Totally harmless, just for fun facts. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
Hey there! Just letting you know we use some fancy gizmos to remember your preferences. This way, we can show you ads that are, well, not completely bananas.
Manage options Manage services Manage {vendor_count} vendors Read more about these purposes
Make cookies
{title} {title} {title}
Techweez | Tech News, Reviews, Deals, Tips and How To
Crunchy Cookies 🍪 Ahead!
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
Listen, this legal stuff is about as exciting as watching paint dry. But it basically says we only use your stuff for what you asked us to do, and nobody else gets to peek!
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
It's those sneaky cookie crumbs websites leave behind to count visitors, like counting ants at a picnic! Totally harmless, just for fun facts. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
Hey there! Just letting you know we use some fancy gizmos to remember your preferences. This way, we can show you ads that are, well, not completely bananas.
Manage options Manage services Manage {vendor_count} vendors Read more about these purposes
Make cookies
{title} {title} {title}
No Result
View All Result
  • News
  • Reviews
  • Features
  • Editorial
  • Automotive
  • Entertainment

© 2024 Techweez - Palahala Media Group may earn a commission when you buy through links on our sites.
A Palahala Media Group Brand. All rights reserved.
.