Two-factor authentication (2FA), the extra step that was supposed to keep our devices and online accounts safe from would-be hackers, is now deemed unsuitable.
The idea behind two-factor authentication is simple: You log in to a specific account using your username and password from a new browser, site, or device, and you receive a second authentication request, such as a text message with a temporary PIN. You enter that temporary code, and you're now logged in. Because most hackers don't have access to your phone, your account remains secure.
Technology is constantly evolving, and cybercriminals have found flaws in 2FA, especially if you use your personal phone. Hackers are finding clever ways to steal phone numbers.
What can you do to protect yourself from would-be hackers?
- Stay one step ahead of cybercriminals
Use a secondary number that forwards calls and messages to your primary cell phone. Secondary numbers are common among freelancers and small business owners who don't want to carry multiple phones.
When you set up two-factor authentication, the secondary number keeps your primary phone number secure. If you lose your personal phone, change phone providers, or your number is compromised, the secondary number will remain separate and your authentication messages will still be accessible through a web browser or another phone.
- Get a temporary number
Google Voice gives you a free phone number for voice calls, messages, and voicemail. All you need is an active Google Account.
Here's how to create a Google Voice number:
- Install the Google Voice app, available for iOS and Android. You can also access Google Voice on your computer through a web browser.
- Connect your Google Account.
- After signing in, the app will ask you to choose a Google Voice number. You can search for available numbers by zip code or city, but it's best to choose the one the app suggests
- After you choose your Google Voice number, you need to link and verify your account to an active mobile phone number. All Google Voice calls and text messages can also be forwarded to this number. However, if you plan to use your Google Voice number for two-factor authentication, you will need to turn off call forwarding. You cannot use Google Voice for two-factor authentication and receive calls and messages at the same time.
- Google will then send a six-digit code to your linked phone number to verify your Google Voice account. Enter this code and make sure it's correct.
- All set. You're set up to use your Google Voice phone number.
From now on, instead of using your own phone number for this second level of identity verification, you can instead use your Google Voice number.
There is one downside to this method. Since your Google Voice number is linked to your Google, if hackers manage to hack your Google account, they will also have access to your verification codes.
- Use an authenticator app
Authenticator apps are much easier and more secure than a text message. They're specifically designed to help you with two-factor authentication, and services like Google Authenticator can protect your login details.
Google users are often encouraged by the tech giant to use an authenticator app for their two-factor passwords. In addition to Google Authenticator, you can also use other authenticator apps, such as Duo, Authy, LastPass, or FreeOTP.
- Use a smartphone app
In addition to the security of two-factor authentication, it's almost essential to have multiple numbers so you don't have to give out your personal number. Using apps like Burner, Hushed, and Flyp on your smartphone, you can have multiple numbers on a single phone.
