I used that RSA fob back in the day. Worked just fine, I thought.Rafe wrote: ↑Mon Dec 13, 2021 7:13 pmWhenever feasible, for sensitive accounts I always opt to use two-factor authentication. Bit of a pain, but worth it. We even used it as a product from RSA over 15 years ago at a company I worked for. That particular method never caught-on widely, though. We were issued a little key fob manufactured by RSA (in case Andy is reading, not that RSA; RSA Security LLC, now owned by Dell). Each key fob was unique, and every three minutes (I think that was the duration) the fob would display a new numeric code. The code was synched with the RSA servers, so we had to enter our password plus the code to log in; impossible to log in without the key fob.
Today the most common two-factor auth method is to to send you a numeric code via an SMS text message to your cell number on file and have that code expire in a few minutes. You're still hosed if you need to log-on but have lost your phone...or dropped it in the bay that time you lost all your firearms while boating off Galveston.
Currently use Google Authenticator frequently for 2FA.... Works reliably and has a growing base of websites that can use it. One application for 2FA makes things simpler. I prefer not to use SMS, since that requires me to give up my mobile number, when it's appropriate not to.
