Quote from: shtako on January 19, 2018, 12:28:35 PM

Quote from: AlCamus on January 19, 2018, 11:59:49 AM

Quote from: DNotes on January 18, 2018, 02:47:17 PM

Quote from: AlCamus on January 18, 2018, 07:44:20 AM

Question on DNotes vault update: Do you consider two factor authentication via SMS? I guess that there are a lot of people who can not (are not able to) use QR codes.

Hi AlCamus, we hadn't considered using SMS authentication at this time. The current 2FA uses Google authenticator, which the user can either scan the QR code or enter the written code into the Google Authenticator app. We would certainly be interested to find out if there are users who are unable to use this form of 2FA. My guess is that the phone would not be a smart phone?

Yes, or people who do not want or do not understand how to use a google app. I just think that there should be (or is needed) another option in two-factor authentication to secure the DNotes Vault account than Google Authenticator. DNotes Vault operates like a bank account and banks usually use personal identification numbers or SMS as two-factor authentication. Or is there perhaps once in a while a confirmation via email requested? I didn't checked this yet.

SMS two-factor authentication is not secure and should be avoided. Google to find out why.

Thanks shtako and AlCamus, we will look into it for future options. I understand there is a risk using SMS, but if there are no other options for the user it may be better than no 2FA.