Hacker News Reader

I think it should be fairly obvious to most here, but it bears repeating that any service which requires a phone number for 2FA is to be avoided like the plague.

View on HN

I hate the fact that Google requires a phone number to set up 2FA. Only then does it show the Hardware/App options.

A phone number, or an Android phone logged into the account

Which companies allow 2FA without a phone number?

Most of the services I use allow it without a phone number (as SMS isn’t very secure). A bigger service that I can think of off the top of my head is GitHub.

AWS

ETrade. Reddit. Github. Slack. Dropbox. The California DMV.

As far as I can tell most new apps require a phone merely for registration. It's not even close to optional.

Twitter pretends it doesn't but it locks you out in ~5 minutes if you don't verify your phone number.

But on the plus side, if you then create another account and use the same phone number, I assume that phone number is now linked to the new account (because they tell you that it's owned by another user and it'll be claimed) and not the one you actually want to use.

Reply on news.ycombinator.com