Thread by @AhsanDeliri

What you should do instead of SMS #2factorauthetification is use something like an authy app. @1Password has one built in but there are others. Authy is a mobile and desktop application that provides two-factor authentication (2FA) services to help secure your online accounts.

You download and install the Authy app on your device.
You set up two-factor authentication for your online accounts that support Authy. This involves scanning a QR code or entering a code into the Authy app.

Whenever you log in to a supported account, you enter your username and password as usual, and then you are prompted to enter a code generated by the Authy app. This code changes every 30 seconds, and only you can access it through the Authy app on your device.

Benefits of using Authy:
Increased security: With Authy, even if an attacker manages to steal your password, they will still need access to your device in order to generate the 2FA code and gain access to your account.

Ease of use: Authy simplifies the process of setting up and using 2FA by providing a single app that can be used with multiple online accounts.
Multi-device support: Authy allows you to sync your 2FA tokens across multiple devices, so you can access your codes from

your smartphone, tablet, or desktop computer.
Backup and recovery: Authy provides a backup and recovery feature, which allows you to recover your 2FA tokens in case you lose or replace your device.

Compatibility: Authy is compatible with a wide range of online services and websites, including Google, Facebook, and Dropbox, making it a versatile option for securing your online accounts.

The technical aspect of timing in Authy relates to how it generates and validates the one-time codes used for two-factor authentication (2FA). When you set up 2FA with Authy, a shared secret is established between the Authy app and the online service or website that you

are securing. This shared secret is used to generate one-time codes that are valid for a short period of time, usually 30 seconds.

To generate the one-time code, the Authy app uses the shared secret and the current time, which is obtained from a time synchronization server.

This time synchronization is important because it ensures that both the Authy app and the server are using the same time when generating and validating the one-time code.

When you log in to a service that is secured with Authy 2FA, the service will ask for the one-time code generated by the Authy app. The service then independently generates a one-time code using the shared secret and the current time, and compares it to the one-time code provided

by the Authy app. If the codes match, the service grants access.

The short time window for the one-time code is important for security, as it limits the amount of time an attacker has to use a stolen code to gain access to your account. The time synchronization between the

Authy app and the server is also important, as any deviation in time could result in a one-time code that is no longer valid, or that is generated too far in advance or too far in the future. This is why Authy relies on time synchronization servers that provide

highly accurate time, to ensure that the codes generated by the app are always valid and that your accounts remain secure.