2 step verification, conceptually, is leaps and bounds more secure than a simple password, especially when the average user re-uses passwords. It requires the attacker to have both your pw and access to your pw device.
Unfortunately sms is not remotely secure, especially from feds thanks to the patriot act. A random number generator which uses time to generate a code that uses the same seed as the login server is much more secure, as this requires physical access to the number generator.
Fun Fact: When EA's SWTOR launched, they actually sold a keychain that did exactly this.
2 step verification, conceptually, is leaps and bounds more secure than a simple password, especially when the average user re-uses passwords. It requires the attacker to have both your pw and access to your pw device.
Unfortunately sms is not remotely secure, especially from feds thanks to the patriot act. A random number generator which uses time to generate a code that uses the same seed as the login server is much more secure, as this requires physical access to the number generator.
Fun Fact: When EA's SWTOR launched, they actually sold a keychain that did exactly this.