Ask HN: Auth by Phone Instead of Email?

2 ポイント投稿者 jensenbox7 年前2 コメント

Seems like for simplicity, using a cell phone instead of email account registration and login is the way to go. Email seems so outmoded in the world of mobile communications. I think using a mobile number with some form of Authenticator for important stuff is reasonable. This would bypass all the Social logins, email deliverability and help create uniqueness as well as remove passwords.

How far off am I in thinking this is an ok thing to do?

2 コメント

pwg7 年前

Your suggestion is but one sim swap away from failure for each user:

https://krebsonsecurity.com/tag/sim-swap/

detaro7 年前

I've changed my phone number more often than my mail account, and for really important stuff recovery over phone is regularly considered bad because it's to easy to compromise. It also isn't that great internationally.