Yes, if a login has a fallback to SMS it just presents both 2FA's as an attack surface. You may be able to use a Google Voice account for SMS with Wise. Lock down the Google account with robust 2FA, and don't materialize the codes anywhere.
Alternatively, you could get a Google Fi phone, which I understand requires a login to Google to unlock a phone port or sim swap. That technically is true with some other carriers but there may be social engineering weaknesses. I believe T-mobile requires an SMS code to the old phone to authorize a sim swap.
Alternatively, you could get a Google Fi phone, which I understand requires a login to Google to unlock a phone port or sim swap. That technically is true with some other carriers but there may be social engineering weaknesses. I believe T-mobile requires an SMS code to the old phone to authorize a sim swap.
Statistics: Posted by Northern Flicker — Tue Feb 20, 2024 12:48 pm — Replies 5 — Views 448