TexasCHLforum.com

parabelum wrote: ↑Mon Aug 08, 2022 5:27 pm

allisji wrote: ↑Mon Aug 08, 2022 5:24 pm I get no cell phone reception in my most areas of my office building at work. I log into my account using my username and password and they send me a passcode via text messaging, then I go to the break room and stand by a window waiting for the code.

no doubt that it is more secure than a good old-fashioned password, but if I'm going to be using two-factor then why do I still need a high security password with an uppercase letter, lower case letter, number, and a special character? It would be nice if I could go back to a password that I will actually remember.

Because it increases the work factor for the attacker and makes you less susceptible to rainbow and dictionary attacks, along with social engineering probes….

You either have security or convenience, but not both. It’s a trade off.

You can use a password manager to create, store and use very strong passwords. It also uses MFA to login, but let's you keep very strong passwords with less effort.

After someone hacked my computer and got my login credentials to my bank and took nearly $40,000, I use MFA for everything. The bank returned my funds, but their fraud people talked me into MFA.

For most items, I use google authenticator. My employer uses DUO. My bank uses its app on my phone. I've not experienced any problems since the switch to MFA. Because of poor cell reception, I switched to T-Mobile because of its WIFI calling function. If I have WIFI, I can make/receive calls.