• 0 Posts
  • 4 Comments
Joined 8 months ago
cake
Cake day: July 10th, 2024

help-circle

  • In practice, yes. IF IMPLEMENTED PROPERLY it would be extremely unlikely for an attacker to get in.

    For example with a proper implementation of TOTP it would require an attacker to guess the correct number between 0 and 999999 in less than half a minute. Most services make you wait a little bit (often less than humans notice) between attempts and don’t allow infinite attempts, so an attacker would have to be unimaginably lucky.

    There are sadly lots of huge companies that DON’T IMPLEMENT 2FA PROPERLY. Sony Entertainment (account for PlayStation) for example. So a unique and long password is still important.