Short code sms support for 2FA providers
Completed
Currently mysudo do not support incoming sms initiated from short codes. This limit the ability to use sudo generated phone numbers for 2FA with services that only support sms, as the majority of them send verification codes from a short code number. (the recommended workaround from mysudo is not realistic)
Using one's primary mobile number for 2FA is very unsecure and susceptible to sim-swap attacks.
Many people recommend using Google voice numbers to shield against sim-swap as it's much more difficult for an attacker to hijack your number. Mysudo would be a fantastic tool to use as an alternate number that can be used for services that still insist on 2FA sms.
-
Official comment
We have now deployed into production improvements to our SMS short code handling. 👍 Therefore we can now receive SMS and/or 2FA codes from many more different short code providers than we were able to previously.
Please note: Although MySudo does accept messages from short codes, some services, by design, do not accept VoIP phone numbers. Learn more here: SMS short codes what you need to know
Comment actions -
Would also like verification code support. Although I actually prefer using an authenticator app with a randomly generated token that expires every 30 seconds (like Authy).
Unfortunately some services still send out their 2fa codes through sms, and as you mentioned using your cell number is a big no-no, support for this is urgently required :)
-
I created a community account just to say this is also my number 1 requested feature as well as friends of mine. While I agree with Fawkes that 2FA tokens are preferred, many institutions including banks do not use tokens and still only use SMS for 2FA. I do not provide my actual phone number to banks therefore I'm risking my security without 2FA but I'd much rather provide a Sudo number.
Please sign in to leave a comment.
Comments
7 comments