Idea: develop more ways to receive 2-step verification code (email address or application on smart phone )
Recently, I did not receive 2-step verification code through SMS to log in my Box account, so I had to request support from Box team to disable 2-step verification in my Box account. I know that without 2-step verification, my Box account is less secure. Please consider the following idea: (i) add another way that we can receive 2-step verification code such as the email address, or (ii) develop the application on smart phone (e.g. iOS, Android phones) that generates 2-step verification code for Box account. Thank you (PS: I just move from BoxSync to BoxDrive, so I decide to post this idea in the area of BoxDrive).
Anonymous
shared this idea
We now provide TOTP support for MFA
https://support.box.com/hc/en-us/articles/360059934154-TOTP-support-for-MFA
For more details on setting up MFA for your account, please refer to this guide: https://support.box.com/hc/en-us/articles/360043697154-Two-Factor-Authentication-Set-Up-for-Your-Account
-
Norberto Soares
commented
the use of auth apps for 2fa/2sv has been made available: https://support.box.com/hc/en-us/articles/360044195853-Configuring-Two-Step-Login-Verification
-
Anonymous
commented
strongly support SMS alternatives (such as app-based codes) for 2 reasons:
1. the code is usually needed in unrecognized logins (traveling in a foreign country), which is also where it may be difficult to receive SMS reliably.
2. SMS is vulnerable to sim card hijacking which is a well known and very serious security problem with SMS verification. -
Anonymous
commented
For those of us that don't have or use cell phones, we need another option for completing the 2 step security verification. I only use a landline and it cannot receive texts. Please provide another option,such as email verification or something. Thanks!