Something I Know

Password

Something I Have

SMS One-Time Passcode

• Not tied to device crypto keys, thus easier to recover from device loss

• Requires network connectivity

• Insecure (SMS interception: over the air, SS7, SIM swap)

Jover, 2020

Software App One-Time Passcode

Hardware Token One-Time Passcode

Something I Am