Web Security · Senior · Question 36 of 75
Why is SMS considered a weaker second factor?
- 1Because phones can't receive SMS while browsing
- 2Because SMS messages are too short for secure codes
- ✓Correct answer: It's vulnerable to SIM swapping, interception and real-time phishing relay
Explanation
SMS is better than no MFA, but authenticator apps and especially WebAuthn security keys or passkeys are stronger.