2FA without a mobile phone

[thebursar]

The initial message was deleted from this topic on 02 September 2023 at 18:31

[Glosphil]

Do you have a landline?

[Dracoro]

Presumably you have Wi-Fi so if your phone has Wi-Fi calling (if so make sure turned on), then SMS will come over your internet connection instead of over the air.

EE do this, and I think the rest do but best to check.

[Mr Pointy]

Look at a repeater?

https://www.ofcom.org.uk/phones-telecoms-and-inter...

Presumably you are using app based 2FA where possible - you can also often get 2FA codes sent via a landline number. My sister does this as she doesn't have a mobile phone.

[C69]

Isn't the simplest solution to use an authenticator app rather than SMS authentication?

I appreciate that some sites don't support this, though.

[Buttery Ken]

C69 said:

Isn't the simplest solution to use an authenticator app rather than SMS authentication?

I appreciate that some sites don't support this, though.

This. Use one of the 2FA apps rather than SMS. I use Authy.

[Mr Pointy]

Buttery Ken said:

C69 said:

Isn't the simplest solution to use an authenticator app rather than SMS authentication?

I appreciate that some sites don't support this, though.

This. Use one of the 2FA apps rather than SMS. I use Authy.

There are plenty of sites that only offer SMS 2FA - you can't rely solely on an app based authenticator.

[durbster]

Mr Pointy said:

Buttery Ken said:

C69 said:

Isn't the simplest solution to use an authenticator app rather than SMS authentication?

I appreciate that some sites don't support this, though.

This. Use one of the 2FA apps rather than SMS. I use Authy.

There are plenty of sites that only offer SMS 2FA - you can't rely solely on an app based authenticator.

SMS 2FA is far less secure so they really shouldn't have it as the only option.

It's better to use an app if you have the choice.

[Mr Pointy]

durbster said:

Mr Pointy said:

Buttery Ken said:

C69 said:

Isn't the simplest solution to use an authenticator app rather than SMS authentication?

I appreciate that some sites don't support this, though.

This. Use one of the 2FA apps rather than SMS. I use Authy.

There are plenty of sites that only offer SMS 2FA - you can't rely solely on an app based authenticator.

SMS 2FA is far less secure so they really shouldn't have it as the only option.

It's better to use an app if you have the choice.

True, but you often don't so you have to have a method of getting SMS codes. I'm guessing you don't need an NHS login for contact with your GP? Currently NHS login only supports SMS. That's just one example.

[illmonkey]

Tons of services online, some even free, but look sketchy as all replies are publicly shown, suppose you could VPN into the site to get it. Or just go for a paid for service

https://thesmsworks.co.uk/blog/virtual-mobile-numb...

[Harpoon]

As mentioned by Dracoro - I'd look at a carrier and mobile device that supports SMS over WiFi. Note that just supporting Voice over WiFi (WiFi Calling) doesn't mean you get SMS over WiFi as well. For instance, O2 launched SMS over WiFi last year but only for Samsung devices:

https://community.o2.co.uk/t5/Welcome-News/SMS-ove...

One of the reasons I went with ID Mobile is they support it. The front of our house (where my study is) has very little reception, so waiting for a 2FA SMS usually involved running out into the garden to wave your phone around in the hope you could receive the SMS and be back at the PC before the login or payment authorisation timed out.

https://www.idmobile.co.uk/help-and-advice/wifi-ca...

[audi321]

Do you use an iphone or Android phone?

There are options for both to get SMS on a laptop/Macbook

[colin79666]

audi321 said:

Do you use an iphone or Android phone?

There are options for both to get SMS on a laptop/Macbook

SMS on Mac requires the iPhone to act as a relay so still doesn’t work if you have no signal.

As above, use time based one time codes or at least push notifications that can go through Wi-Fi. If SMS is the only option consider if you can change provider as they obviously don’t care enough about you as a customer and your security.