Two-factor login: adding a second check to the sign-in
From Vortex Wiki, the Vortex knowledge base
Two-factor login turns a stolen password into an incomplete one.
Definition
Two-factor login asks for something besides the password, for example a code or a decrypted message, before the account opens.
Common methods
On onion services the usual method is an encrypted challenge that only your key can read. Some services also offer one-time code apps.
Why it matters with phishing
A lookalike page can steal a password, but it cannot easily reuse a challenge meant for your key.
Keep a fallback
Store your recovery phrase separately, so that losing the second factor does not lock you out for good.
See also
- Escrow – Escrow: who holds the money until an order is done
- Multisig – Multisig: payments that need more than one key
- Monero (XMR) – Monero (XMR): the privacy coin used on many onion services