Hacker News Reader

No. No it's not. If you're making software for the wider-public you can't demand people download a special app for it. Or even understand what a 2FA code is.

SMS is the only way, so far, to make 2fa adoption fast amongst everyone.

View on HN

Not quite true - smartphone market penetration is quite large, so it is possible to reliably offer a universal app (see: MS Authenticator, Google Authenticator, Authy) for code auth. Now, sure, you can argue that SMS should be kept as an _option_ but it should never be the only one.

Reply on news.ycombinator.com