??LEARN ABOUT MULTI FACTOR AUTHENTICATION ??
BY U-SOCIETY ?
The aspects of password security considered until now are based on the secrecy of the password. Multi-factor authentication increases the security of a password system by the necessity to know or possess other functions besides the secret password. This means that a login to an application requires the entry of a password and additionally a TAN (transaction number), which was sent in advance as a list by post, or a code, which was sent to a registered telephone number by SMS. In order for an attacker to take over the identity of the regular user, he must know the password and also be in possession of the other factor.
More and more companies with large online services or cloud offerings are offering two-factor authentication (2FA) at least as an option. Sometimes customers are pushed into 2FA. 2FA works without much additional effort if the customer has several devices anyway, e.g. a computer and a smartphone. Then the smartphone can be used to transmit or generate the second factor for a login on the computer.
From a security point of view, however, it is not optimal if the smartphone is used for the login and the code/TIAN for the 2FA is also sent or generated via the smartphone. A biometric procedure (fingerprint, face recognition, retina scan) would be the second factor to be considered, especially for modern smartphones. In practice, however, it can currently be observed that biometric procedures are often used as the only factor and replace the password. Once again, convenience triumphs over security.
Google Authenticator
An excellent way to implement a 2FA yourself or add it to existing services such as SSH is to use the Google Authenticator program. Available for iOS and Android, this app generates a code associated with a service every 30 seconds after a service is set up. There is no data exchange with Google, so you don't have to worry that Google will know about every login.
The code generated by the app must be used as a second factor to the actual password or key when logging in.
Alternatives to the Google Authenticator are hardware-based code or token generators, which are often implemented in the form of key chains and offered by various manufacturers. Common devices are e.g. YubiKey or SecurID
Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf us0ciety.blogspot.com.
SOCIAL SHARE CARD GENERATOR