I recently logged in to BD with a different browser and it sent a code via my email.
That is fine but why does BD not use a mobile phone text message as an option?
Hello,
Basic SMS based codes are vulnerable to SIM swapping and interception. SMS phishing, or smishing, is another popular method fraudsters use to steal verification codes and gain access to a person’s account. There are a couple of insightful articles on this topic on the Bitdefender blog:
https://www.bitdefender.com/en-us/blog/hotforsecurity/why-use-an-authenticator-app-instead-of-sms
In short, SMS based codes are not that safe to use.
Regards
2FA often sends codes by email because email is widely available and easy to set up without additional apps or devices.
However, email-based 2FA is generally less secure than authenticator apps or security keys, since access to the email account could also expose the verification codes.
