2FA is missing a key feature

syslog.ravelin.comsite

“When my 2FA code is entered incorrectly I'd like to know about it”.

from

IAM

added

2026-10-10

likes

0

similar

1. ▲
   Getting 2FA Right in 2019 blog.trailofbits.com

   site category #iam link ↗

   On the UX aspects of 2FA.

   
2. ▲
   Payload: 2FA Implementation zarif.dev

   site category #payload link ↗

   Two-factor authentication (2FA) for Payload.

3. ▲
   Attacking Google Authenticator unix-ninja.com

   site category #iam link ↗

   Probably on the verge of paranoia, but might be a reason to rate limit 2FA validation attempts.

4. ▲
   SMS: The most popular and least secure 2FA method allthingsauth.com

   site category #iam link ↗
5. ▲
   SMS 2FA auth is deprecated by NIST techcrunch.com

   site category #iam link ↗

   NIST has said that 2FA via SMS is bad and awful since 2016.

6. ▲
   Fail2ban fail2ban.org

   site category #cybersecurity-blueteam link ↗

IAM › Multi-factor auth: ““When my 2FA code is entered incorrectly I'd like to know about it”.”