{"id":369,"date":"2018-01-24T15:28:07","date_gmt":"2018-01-24T05:28:07","guid":{"rendered":"https:\/\/www.pavelchmelar.cz\/?p=369"},"modified":"2018-04-30T16:08:59","modified_gmt":"2018-04-30T06:08:59","slug":"security-two-factor-authentication-2fa","status":"publish","type":"post","link":"https:\/\/www.pavelchmelar.cz\/security-two-factor-authentication-2fa\/","title":{"rendered":"SECURITY: two factor authentication (2FA)"},"content":{"rendered":"

2FA – optional for now, a must in near future<\/h2>\n

We live and operate in a\u00a0digital world where security should be our priority number one, but let’s be honest, it rarely is. How many of you have really strong passwords that do not repeat and are changed frequently? I know! It is a painful, boring and time-consuming\u00a0process. Well, luckily there are services like LastPass<\/a> and other password management tools that help us simplify it and use our time better, liking chilling at the beach for example:).
\nNote:<\/strong> to get a premium membership for 1 year free, use this link for LastPass<\/a>\u00a0(not guaranteed)<\/p>\n

Additionally, to our standard username-password system, it becomes more and more common to use 2FA. That is a Two Factor Authentication (TFA\/2FA)<\/strong> process, where one factor is a knowledge of our password and second is access or code from a different source. Those of you with internet bank access, you most likely use SMS as authorisation for your transactions. There are, however, other options such as phone call, hardware token (little dongle provided by banks) or software token generator.<\/p>\n

Nowadays, you can secure plenty of online apps and services (such as facebook, google, twitter, etc.) with 2FA. We will see only a growth of its application in near future. I encourage you all, to activate those 2FA<\/strong> as the techniques of breaking into systems are constantly evolving. What do you consider secure today, might be broken tomorrow. So additional layer like 2FA is a good option, for now.<\/p>\n

Some of you may have heard of Google Authenticator. It is a software token generator, that spits out numbers that you then use to authenticate your access to particular service or app. It is sort of like getting SMS verification code, but the code is generated by the application instead of receiving it from a 3rd party.<\/p>\n

\"authy<\/a><\/p>\n

Well, before you even touch it, forget about Google Authenticator (GA) and look at Authy<\/a><\/strong>. It does the same but much more and trust me, you want that little more. At the bare minimum, GA does not provide backups so if you lose access to it, you will have a lot of “fun” trying to cancel 2FA with services you use and recover your access. I was there, I learned the lesson, so you don’t have to. Here is a\u00a0full comparison between Google Authenticator and Authy<\/a>\u00a0to convince us all. Oh, and it is FREE of course.<\/p>\n

 <\/p>\n

Additionally, you could also use LastPass Authenticator<\/a>, but that one works on mobiles only at the moment of writing this post. Lastly but not least, there are several others 2FAs available, so do your research and chose the one suit you the best. Authy kills it for me now. Also, if you haven’t check out that LastPass password manager – I am sure you will love it and if not, I want to hear more from you.<\/p>\n","protected":false},"excerpt":{"rendered":"

2FA – optional for now, a must in near future We live and operate in a\u00a0digital world where security should be our priority number one, but let’s be honest, it rarely is. How many of you have really strong passwords that do not repeat and are changed frequently? I know! It is a painful, boring […]<\/p>\n","protected":false},"author":1,"featured_media":370,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/posts\/369"}],"collection":[{"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/comments?post=369"}],"version-history":[{"count":6,"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/posts\/369\/revisions"}],"predecessor-version":[{"id":421,"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/posts\/369\/revisions\/421"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/media\/370"}],"wp:attachment":[{"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/media?parent=369"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/categories?post=369"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pavelchmelar.cz\/wp-json\/wp\/v2\/tags?post=369"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}