Ukuqinisekiswa kwezinyathelo ezimbili ku-Android: umhlahlandlela ophelele wokugwema amaphutha okungena ngemvume

Ukuvikela ifoni yakho ephathekayo kanye nama-akhawunti aku-inthanethi kulezi zinsuku akulona ihlaya: kukhona okuningi kakhulu ukuvuzaukwebiwa kwephasiwedi kanye nokuhlaselwa kwe-phishing lokho kubeka ama-imeyili, izinkundla zokuxhumana, amabhange aku-inthanethi, ngisho nokutshalwa kwezimali engozini. Ku-Android, isithiyo sangempela sokuphepha akuseyona nje iphasiwedi, kodwa inhlanganisela yezici eziningana eziqinisekisa ukuthi nguwe ngempela ozama ukungena ngemvume.

Ngaphakathi kwaleso simo, Ukuqinisekiswa kwezinyathelo ezimbili ku-Android (ukuqinisekiswa kwezinyathelo ezimbili noma kwe-2FA) Sekuyinketho eyisisekelo okufanele wonke umuntu ayisebenzise. Iqukethe ukudinga into yesibili yokuqinisekisa ngaphezu kwephasiwedi yakho evamile: lokhu kungaba ikhodi yesikhashana, isaziso seselula, ukhiye wokuphepha, noma ngisho neminwe yakho noma ubuso. Ngale ndlela, noma ngabe othile uqagela noma eba iphasiwedi yakho, Ngeke ukwazi ukufinyelela i-akhawunti yakho ngaphandle kwaleso sici sesibili.

Kuyini ngempela ukuqinisekiswa kwezinyathelo ezimbili futhi kuhambisana kanjani ne-Android?

Uma ungena kuwebhusayithi noma kuhlelo lokusebenza, into evamile okufanele uyenze ukuthayipha igama lomsebenzisi (noma i-imeyili, noma inombolo yocingo) kanye nephasiwediFuthi lokho kuqinisekisa ubuwena bakho. Lokho ukuqinisekiswa kwesici esisodwa. Inkinga ukuthi amaphasiwedi ayavuza, asetshenziswe kabusha kumasayithi amaningi, futhi avame ukuba buthaka kangangokuthi kulula ukuwaqagela.

Ukuqinisekiswa kwezinyathelo ezimbili kunezela ubufakazi besibili obuzimele bokuthi nguweNgokuvamile, lesi sinyathelo sesibili ikhodi yesikhashana enamadijithi amaningi, isaziso sokuphusha osivumayo efonini yakho, i-SMS, noma isiqinisekiso se-biometric. Umqondo uwukuhlanganisa into oyaziyo (iphasiwedi) nento onayo (ifoni yakho, ukhiye wakho wokuphepha) noma into oyiyo (iminwe yakho, ubuso bakho).

Empeleni, ukugeleza kubonakala kanje: Okokuqala ufaka iphasiwedi yakho bese uqinisekisa ngesici sesibiliUkufinyelela kunikezwa kuphela uma izivivinyo zombili seziphasile. Lokhu kusho ukuthi noma ngabe othile uthola iphasiwedi yakho, usadinga ifoni yakho, ukhiye wakho, noma ikhodi yakho yohlelo lokusebenza lokufakazela ubuqiniso—into enzima kakhulu ukuyintshontsha buthule.

Nokho, kubalulekile ukucacisa ukuthi Ayikho uhlelo oluphelele ngokupheleleUkuqinisekiswa kwezinto ezimbili (2FA) kunciphisa kakhulu ingozi, kodwa kusengenzeka kube sengozini ngokusebenzisa amasu afana nokushintshana nge-SIM, ubugebengu bokweba ikhodi obuthuthukisiwe, noma i-malware yokuvimbela i-SMS. Noma kunjalo, intuthuko yokuphepha ngokusebenzisa iphasiwedi kuphela inkulu kakhulu.

Ungavumela kanjani ukuqinisekiswa kwezinyathelo ezimbili ku-akhawunti yakho ye-Google ku-Android

I-akhawunti yakho ye-Google iqukethe inani elikhulu ledatha: I-Gmail, Izithombe ze-Google, i-Google Drayivu, izindawo zamamephu, i-YouTube, i-Android, ukuthenga kanye nokubhaliselweUkunika amandla i-2FA lapha kufanele kube yinto yokuqala oyenzayo uma usebenzisa i-Android nsuku zonke.

Ukuze usethe ukuqinisekiswa kwezinyathelo ezimbili ku-akhawunti yakho ye-Google kusuka ku-Android, izinyathelo ezijwayelekile zilula kakhulu: Okokuqala ungena ngemvume ku-akhawunti yakho bese ungena esigabeni sokuphepha, lapho uzobona khona inketho yokuqinisekisa enezinyathelo ezimbili.

Ngokuningiliziwe, inqubo ejwayelekile ku-Android yile (amagama emenyu angahluka kancane kuye ngenguqulo): Vula izilungiselelo zefoni yakho, iya ku-"Google" bese uya ku-"Phatha i-akhawunti yakho ye-Google"Kusukela kuthebhu ethi “Ukuphepha”, bheka isigaba esithi “Ungena kanjani ku-Google” bese uchofoza ku-“Ukuqinisekiswa kwezinyathelo ezimbili” noma “Vula ukuqinisekiswa kwezinyathelo ezimbili”.

Uma usebenzisa lesi sici, i-Google izokucela ukuthi ulandele izinyathelo ezithile eziqondisiwe: Qinisekisa ubuwena bakho, bhalisa inombolo yocingo, khetha izindlela zokuqinisekisa ezinezici ezimbili (izaziso, i-SMS, okhiye bokufinyelela, uhlelo lokusebenza lokuqinisekisa) futhi, kwezinye izimo, khiqiza amakhodi okusekelayo. Yonke inqubo iboniswa esikrinini, ngakho-ke yamukela futhi ufunde ngokucophelela.

Uma i-akhawunti yakho ye-Google ingeyenkampani noma yezemfundo (ephethwe yinkampani, inyuvesi, noma isikhungo), Umlawuli kungenzeka ukuthi usehlele izinqubomgomo zakheUma kunjalo, ungase ungaboni izinketho ezifanayo noma ukwazi ukwenza i-2FA isebenze ngokwakho. Kuzodingeka uxhumane nomphathi wakho ukuze uvumele ukuqinisekiswa kwezinyathelo ezimbili noma ukuthola inqubo yangaphakathi.

Izindlela zokuqinisekisa zesici sesibili ziyatholakala ku-Android naku-Google

Uma ukuqinisekiswa kwezinyathelo ezimbili sekuvuliwe, Ungakhetha izindlela eziningana ezahlukene zokuqedela leso sinyathelo sesibili.Akuwona wonke anezinga elifanayo lokuphepha noma ubulula, futhi i-Google izonquma nganoma yisiphi isikhathi ukuthi iyiphi efaneleke kakhulu ngokusekelwe kuzilungiselelo zakho, idivayisi yakho, nokuthi ungena kuphi ngemvume.

Uma ungena ngemvume, kuvamile ukuhlangana izicelo zokuqinisekisa ezahlukene kuye ngengozi etholwe yi-GoogleNgezinye izikhathi kuzoba isaziso esilula kakhulu, ngezinye izikhathi ikhodi ekhiqizwe uhlelo lokusebenza, ngezinye izikhathi i-SMS, futhi uma unezinkinobho zokufinyelela, ungase ungaboni ngisho nesinyathelo sesibili esivamile.

Empeleni, izindlela ezivame kakhulu ongazisebenzisa kumasevisi e-Android ne-Google yilezi: ama-passkey, izaziso ze-Google, izinhlelo zokusebenza zokufakazela ubuqiniso, ama-SMS namakholi, amakhodi e-QR akhethekile kanye namakhodi okuqinisekisa ahlukileOkungcono kakhulu, kufanele uhlanganise eziningana ukuze ube nezinketho uma ulahlekelwa ifoni yakho noma ulahlekelwa yikhava.

Okhiye bokungena (okhiye bokudlula) nokhiye bokuqinisekisa ubunikazi bezingxenyekazi zekhompuyutha

Izinkinobho zokufinyelela zikhona manje indlela yokungena elula kakhulu, futhi ngesikhathi esifanayo, ephephile kakhulu okunikezwa yi-Google ku-Android. Zisekelwe ezindinganisweni ze-FIDO Alliance kanye ne-W3C, futhi zisebenzisa i-cryptography yokhiye womphakathi efana neyezikhiye zokuphepha ezingokoqobo.

Uma ungena ngemvume ngokhiye wokufinyelela, Awudingi ukufaka iphasiwedi noma ikhodi yesibili yendabuko.Inkinobho yokufinyelela ngokwayo ifakazela ukuthi unedivayisi yakho nokuthi usebenzisa ukukhiya kwayo isikrini (i-PIN, iphethini, izigxivizo zeminwe, noma ubuso). Ku-Android, lokhu kuhunyushwa njengento elula njengokubuka ifoni noma ukubeka umunwe wakho kumfundi ukuze ungene ngemvume.

Izinkinobho zokufinyelela zigcinwa ngaphakathi kwe-akhawunti yakho ye-Google futhi uvumelanise kuwo wonke amadivayisi akho Ziyahambisana. Azikwazi ukubhalwa ephepheni, zithunyelwe ngeposi, noma zihanjwe njengombhalo ofundekayo, ngakho-ke akunangqondo ukuthi umhlaseli "acele" ukhiye wakho wokufinyelela. Yingakho nje zimelana kakhulu nobugebengu bokweba imininingwane ebucayi kanye nokufakwa kweziqinisekiso.

Ngaphezu kwama-passkey esofthiwe, kukhona inketho yokusebenzisa okhiye bokuphepha behadiweLawa amadivayisi amancane aphathekayo (i-USB, i-NFC, i-Lightning, njll.) owaxhumanisa nefoni yakho, ithebhulethi, noma ikhompyutha ukuqinisekisa ukuthi nguwe ozama ukungena. Alungele ukuvikela ama-akhawunti abalulekile (i-imeyili eyinhloko, amabhange, amaphaneli okuphatha, ama-cryptocurrencies) ngoba Cishe akunakwenzeka ukweba kude.

Uma kwenzeka ukuhlaselwa lapho umgebengu ezama ukweba iphasiwedi yakho noma olunye ulwazi lomuntu siqu, Izinkinobho zokufinyelela kanye nezinkinobho ezibonakalayo ziyizivikelo eziqine kakhulu ekuhlaselweni kobugebengu bokweba imininingwane ebucayiNgisho noma uyiswa kuwebhusayithi mbumbulu bese ufaka iziqinisekiso zakho ngengozi, ukhiye ngeke usayine ukungena ngemvume uma isizinda kungeyona eyangempela.

Izaziso ze-Google njengesici sesibili

Uma ungafuni ukushesha ukufinyelela okhiye okwamanje, Izaziso ze-Google ziyindlela enconywa yinkampani uqobo lwayo. Njengesinyathelo sesibili sokulinganisela phakathi kokuphepha nokulula, esikhundleni sekhodi, uzothola isaziso kufoni yakho ephathekayo esibuza ukuthi nguwe yini ozama ukungena.

Lezi zaziso zifika njenge thumela izaziso ze-push kumafoni akho e-Android lapho ungene khona ngemvume nge-akhawunti yakho ye-Google Futhi isebenza kuma-iPhone lapho ungene khona ngemvume ku-Google kuzinhlelo zokusebenza ezifana ne-Gmail, i-Google Photos, i-YouTube, noma uhlelo lokusebenza lwe-Google. Akudingeki ukhumbule noma ukhumbule amakhodi, mane uhlole bese uthepha.

Uma uthola esinye salezi zixwayiso, ngokuvamile ungenza okulandelayo: Thepha okuthi “Yebo” uma kunguwe ongene ngemvume, noma okuthi “Cha” uma ungawuboni lowo mzamo.Kwezinye izimo, i-Google izokukhombisa ulwazi olwengeziwe, njengedivayisi noma indawo ozama ukuyifinyelela kuyo.

Ukuze wengeze ukuphepha okwengeziwe, i-Google ingakucela i-PIN yakho noma ukuqinisekiswa okwengeziwe kwe-biometric Ngokuvuma isaziso. Ngaleyo ndlela, umuntu othatha ifoni yakho evuliwe imizuzwana embalwa ngeke akwazi ukungena nje.

Inzuzo enkulu yezaziso kune-SMS ukuthi Abaxhomekile enombolweni yakho yocingoNgakho-ke, banikeza isivikelo esingcono ekuhlaselweni okufana nokukopishwa kwekhadi le-SIM kanye nokunye ukuxhashazwa okuxhaphaza inethiwekhi yeselula yendabuko.

Izinhlelo zokusebenza zokuqinisekisa: indlela ezisebenza ngayo nokuthi kungani ziphephile kangaka

Izinhlelo zokusebenza zokuqinisekisa zingenye insika ye-2FA yesimanje ku-Android. Zisekelwe ku Amaphasiwedi Esikhathi Esisodwa Asekelwe Esikhathini (TOTP) Lokhu kukhiqizwa endaweni yakho kudivayisi yakho ngokulandela izinga elivulekile. Phakathi kwezinto ezithandwa kakhulu yilezi: Isiqinisekisi se-Google, I-Authy o Isiqinisekisi se-Microsoftphakathi kwabanye abaningi.

Ukusebenza okuvamile kucishe kufane kuzo zonke izinsizakalo: Usebenzisa ukuqinisekiswa kwezinyathelo ezimbili kuwebhusayithi noma kuhlelo lokusebenza olufunayo, uskene ikhodi ye-QR, noma ufaka ukhiye wombhalo kuhlelo lwakho lokusebenza lokuqinisekisa. Futhi kusukela ngaleso sikhathi kuqhubeke, uhlelo lokusebenza luzokhiqiza amakhodi avumelekile e-akhawunti yakho kuphela.

Ngobuchwepheshe, isevisi eku-inthanethi ikunikeza ukhiye oyimfihlo oyingqayizivele ohlotshaniswa ne-akhawunti yakho, kanye nohlelo lokusebenza lokufakazela ubuqiniso Hlanganisa leso sihluthulelo nesikhathi samanje kanye ne-algorithm yezibalo eyaziwayo.Njengoba iseva yesevisi nayo ine "enye ingxenye" ​​ye-algorithm, zombili zingabala ikhodi efanayo imizuzwana embalwa ngaphandle kwesidingo sokuxhumana.

Yingakho uzobona lokho Amakhodi ohlelo lokusebenza ashintsha cishe njalo ngemizuzwana engama-30.Inhlanganisela ngayinye isebenza isikhathi esifushane kakhulu, ngakho-ke noma ngabe othile ubona ikhodi esikrinini sakho, unefasitela elilinganiselwe kakhulu lokuyisebenzisa.

Njengoba lezi zinhlelo zokusebenza sezivele zilondoloze ukhiye oyimfihlo futhi zisebenzisa isikhathi sesistimu ukwenza izibalo, Basebenza ngaphandle kokuxhumeka kwe-inthanethi.Lokhu kunezinzuzo ezimbili ezicacile: ungawasebenzisa kumadivayisi angenayo idatha yeselula noma i-WiFi, futhi kunzima kakhulu ukuwahlasela ukude, ngoba idivayisi ayixhumani ngisho nesevisi lapho ikhiqiza ikhodi.

Empilweni yakho yansuku zonke, inqubo ilula: Uvula uhlelo lokusebenza lokufakazela ubuqiniso, ubheke ikhodi ehlotshaniswa nesevisi efanele, bese uyifaka kuwebhusayithi noma kuhlelo lokusebenza.Futhi ngaleyo ndlela unqoba isici sesibili. Uma umhlaseli engathola igama lakho lomsebenzisi nephasiwedi, ubengeke akwazi ukungena ngaphandle kwaleyo khodi eshintshayo.

I-Google Authenticator ku-Android: ukusetha, ukusetshenziswa kanye nokuvumelanisa

I-Google Authenticator iyisisombululo se-Google sokukhiqiza Amakhodi okuqinisekisa kanye kuphela ahambisana nezinsizakalo eziningi ezisekela i-TOTP-type 2FANakuba isetshenziswa kabanzi kuma-akhawunti e-Google, isebenza naku-Facebook, Instagram, Amazon, GitHub, VPNs, amabhange, nokunye okuningi.

Uhlelo lokusebenza lukhiqiza amakhodi noma ngabe ifoni yakho ephathekayo ayinayo idatha noma ukumbozwa: Idinga kuphela isikhathi sesistimu kanye nokhiye oyimfihlo owawunike wona lapho uwusetha.Lokhu kwenza kube yindlela ethembeke kakhulu uma uhamba, uma usebenza ezindaweni ezingenayo i-akhawunti eningi, noma uma ungafuni ukuthembela ku-SMS.

Ukuze usebenzise i-Google Authenticator ku-Android udinga idivayisi ene-Android 5.0 noma ngaphezuluEzinguqulweni zakamuva, uhlelo lokusebenza lukuvumela futhi ukuthi uvumelanise amakhodi akho ne-akhawunti yakho ye-Google, ukuze ingatholakala kumadivayisi amaningi ngesikhathi esisodwaihlala ibethelwe kokubili ngesikhathi sokuthutha kanye nesikhathi sokuphumula kumaseva e-Google.

Inqubo evamile yokuqala ukuyisebenzisa nge-akhawunti yakho ye-Google yile: Ku-Android, iya kuzilungiselelo zokuqinisekisa ze-akhawunti yakho ye-Google ezinezinyathelo ezimbili, thepha okuthi "Setha isiqinisekisi," bese ulandela imiyalelo.Kwamanye amadivayisi, uzobona inkinobho ethi "Qala" kuqala ngaphambi kokuthi ufike ekuskeni ikhodi ye-QR.

Uma ufuna ukusebenzisa i-Authenticator ngaphandle kokuyixhumanisa ne-akhawunti ye-Google, lokho kungenzeka futhi: Uma uvula uhlelo lokusebenza okokuqala, ungakhetha okuthi "Sebenzisa ngaphandle kwe-akhawunti"Futhi uma usuvele uvumelanise amakhodi akho ne-akhawunti yakho, ungashintshela kwimodi engena-akhawunti kusuka kuphrofayela yakho kuhlelo lokusebenza, yize lokho kuzothutha wonke amakhodi aye kwisitoreji sendawo kudivayisi futhi ngeke esatholakala kwamanye amaselula.

Uma ungenakho ukuvumelanisa kwamafu futhi ushintsha amafoni eselula, Ungadlulisela amakhodi akho ngesandla.Ukuze wenze lokhu, udinga idivayisi endala ene-Authenticator, entsha enohlelo lokusebenza olufakiwe futhi olubuyekeziwe, bese ulandela ukugeleza "kokudlulisa ama-akhawunti", ukhiphe kusuka kudivayisi endala bese ungenisa ngekhodi ye-QR kwentsha.

Ngokuphathelene nokuphathwa kwansuku zonke, uhlelo lokusebenza luvumela Hlela igama lekhodi ngayinye, uyihlele kabusha ngokuyihudula, bese uyisusa ngokuswayipha.Uma ukuvumelanisa kuvuliwe, noma yiziphi izinguquko zizothinta wonke amadivayisi akho. Ngaphezu kwalokho, ungavumela "Isikrini Sobumfihlo" ukuthi... Uhlelo lokusebenza luzokucela i-PIN, iphethini, noma i-biometrics. njalo uma ufuna ukubona amakhodi, wengeza elinye izinga lokuvikela uma ulahlekelwa noma ubolekisa ifoni yakho.

I-2FA nge-SMS, i-imeyili kanye namakhodi e-QR: izinzuzo kanye nokungalungi

Enye yezindlela ezivame kakhulu zesici sesibili yi- ukuthumela amakhodi anezinombolo eziyisithupha nge-SMSKulula, kuyatholakala kuwo wonke umuntu (noma iyiphi ifoni ephathekayo enekhadi le-SIM ingazithola), futhi ayidingi ukufakwa. Ufaka igama lakho lomsebenzisi nephasiwedi, wamukele i-SMS, ukopishe ikhodi kwiwebhusayithi, bese uqedile.

Inkinga enkulu ukuthi I-SMS iya ngokuya ibuzwa njengendlela ephephile. Amasu afana nokushintshana nge-SIM avumela umhlaseli, ngokusebenzisa ubunjiniyela bezenhlalo, ukuthi akholise inkampani ukuthi inikeze inombolo yakho kwenye ikhadi le-SIM. Kusukela ngaleso sikhathi kuqhubeke, yonke imiyalezo ye-SMS, kufaka phakathi amakhodi e-2FA, ithunyelwa kubo.

Kukhona futhi i-malware ekwaziyo vimba imiyalezo ye-SMS ngqo efonini yakho ephathekayo bese udlulisela amakhodi kuseva yomhlaseli. Lokhu, kuhlangene nobuthakathaka ezinqubweni zokubuyisa ama-akhawunti, kuholela izinhlangano ezifana ne-Spanish Data Protection Agency (AEPD) ukuthi zincome ukubeka phambili izinhlelo zokusebenza ze-TOTP kune-2FA esekelwe ku-SMS noma nini lapho kungenzeka.

Ukuqinisekiswa kwe-imeyili kufana nomqondo: Uthola ukhiye wesikhashana noma isixhumanisi sokuqinisekisa ebhokisini lakho lokungenayoKulula futhi akuxhomekile enombolweni yakho yocingo, kodwa uma i-imeyili yakho eyinhloko ingavikelekile kahle noma ingenayo i-2FA, iba yisisulu esiyinhloko sabahlaseli.

Kwezinye izinsizakalo ze-Google kanye nezinye ezithuthukisiwe, ukusetshenziswa kwe Amakhodi e-QR ukuqinisekisa ubuwena bakho noma inombolo yakho yocingoUmqondo uwukuthi uskene ikhodi ye-QR ngefoni yakho ephathekayo kusuka kukhompyutha yakho, uqedele inqubo ephephile efonini yakho, bese uqhubeka kukhompyutha yakho. Ngenxa yokuthi ayisebenzisi inethiwekhi ye-SMS, le ndlela ayisengozini enkulu yokusetshenziswa kabi kwezinombolo zocingo.

Izinzuzo ezisebenzayo ze-2FA ku-Android kubasebenzisi namabhizinisi

Inzuzo enkulu yokusebenzisa ukuqinisekiswa kwezinyathelo ezimbili ku-Android yakho isobala: Kukhulisa kakhulu ukuphepha kwama-akhawunti akho.Ngisho noma iphasiwedi yakho ibuthakathaka noma iphumile ekuphulweni kwedatha, umhlaseli ngeke akwazi ukungena ngaphandle kwesici sakho sesibili.

Lolu hlelo lusebenza futhi njenge isithiyo esisebenzayo ngokumelene nobugebengu bokweba imininingwane ebucayi bakudalaEzihlaselweni eziningi, umsebenzisi ufaka iphasiwedi yakhe kuwebhusayithi mbumbulu eyithumela kubugebengu be-inthanethi. Nge-2FA elungiselelwe kahle (ikakhulukazi ngokhiye bokufinyelela noma izinhlelo zokusebenza ze-TOTP), leyo phasiwedi iyodwa ngeke ivule umnyango, futhi umonakalo uncishiswe kakhulu.

Enye inzuzo ewusizo kakhulu ukuthi Uthola ngokushesha uma othile ezama ukungena kwenye yama-akhawunti akho.Uma uthola i-SMS, isaziso sokusunduza, noma isexwayiso kuhlelo lwakho lokusebenza lwe-2FA ngaphandle kokungena ngemvume, kuyisibonakaliso sokuthi othile uhlola i-imeyili yakho nephasiwedi ndawana thize. Lesi sexwayiso sangaphambi kwesikhathi sikunikeza isikhathi sokushintsha amaphasiwedi akho nokubuyekeza izilungiselelo zakho zokufinyelela.

Emvelweni webhizinisi, ukuqinisekiswa kwezinyathelo ezimbili nakho kwenza izinto zibe lula. izinqubo zokubuyisa iphasiwedi futhi kunciphisa izingcingo eziya ekusekelweni kobuchwephesheUma abasebenzi bengakwazi ukusetha kabusha amaphasiwedi abo ngokuphephile besebenzisa ukuqinisekiswa kwezinto ezimbili eziphathwayo, konga isikhathi, imali, kanye nokukhungatheka kwabo bonke abathintekayo.

Ngaphezu kwalokho, i-mobile 2FA ivumela lokho Abasebenzi bangafinyelela amadokhumenti ezinkampani, izinhlelo zokusebenza, kanye nedatha bengaphandle kwehhovisi. ngaphandle kokudalula inethiwekhi yangaphakathi kangako. Uma ihlanganiswe ne-VPN kanye nezinqubomgomo zokuphepha eziqinile, iyisici esibalulekile sanoma yiliphi isu lokuhamba kwebhizinisi.

Ukulinganiselwa, izingozi ezithuthukile, kanye nokukhathala komsebenzisi

Akuzona zonke izinzuzo. Enye yezingqinamba ezinkulu ze-2FA ukuthi ukungakhululeki okubonwa ngumsebenzisiUkwengeza imizuzwana embalwa enqubweni yokungena ngemvume, ukusesha ikhodi efonini yakho ephathekayo, noma ukulinda i-SMS ukuthi ifike kungaba yinto ekhathazayo, futhi abantu abaningi bagcina beyivala ngenxa yobuvila.

Kukhona futhi ukuncika okucacile ku- ifoni ephathekayo njengedivayisi ephakathiUma ibhethri lakho lifa, ulahlekelwa yikhava, ulahlekelwa yidivayisi yakho, noma yebiwa, ungase uvalelwe ngaphandle kwama-akhawunti akho okwesikhashana, ikakhulukazi uma ungakasethi ezinye izindlela zokutakula njengezihluthulelo ezingokoqobo, ama-imeyili okusekelayo, noma amakhodi okutakula.

Kumasevisi anokuqinisekiswa kwe-SMS, izinkinga zokumbozwa noma ukubambezeleka kokulethwa Ziyinkinga evamile: ucela ikhodi, ayifiki, uyicela futhi, ufaka ephelelwe yisikhathi, futhi ekugcineni, ungase uvalelwe ngaphandle okwesikhashana ngenxa yemizamo eminingi ehlulekile. Lokhu kudala ukukhungatheka futhi kwandisa amathuba okuthi abantu bazoyishiya i-2FA.

Ezingeni lezinsongo ezithuthukile, sesivele sikhulume ngokushintshana kwe-SIM kanye nobugebengu bokweba imininingwane ye-2FA ngesikhathi sangempela (ukuhlaselwa kwe-AITM, “isitha esiphakathi nendawo”). Ekugcineni, umhlaseli usetha iwebhusayithi ehlanganisiwe esebenza njengomlamuleli phakathi komsebenzisi kanye nensizakalo yangempela. ukuthwebula kokubili iphasiwedi kanye nekhodi yesikhathi esisodwa ngesikhathi esisodwa futhi uzisebenzise ngokushesha.

Kukhona futhi i-malware ekhethekile ekubambeni amakhodi e-SMS noma izaziso ezisheshayo kumaselula, kanye nokusetshenziswa kwamaphutha ezinqubweni zokubuyisa ama-akhawunti ezivumela abahlaseli ukuthi badlule ezinye zezinyathelo zokuphepha uma inkampani ingazivalanga kahle zonke izimbobo.

Ekugcineni, ucingo Ukukhathala kwe-MFA Lokhu kuya ngokuya kuvama: uma umsebenzisi ethola izaziso eziningi zokungena ngemvume (isibonelo, ngoba othile uphoqa i-akhawunti yakhe), angagcina emukela eyodwa ngenxa yokukhungatheka noma ukunganaki. Yingakho kubalulekile ukuthi izinhlangano ziqaphe amaphethini ezicelo futhi zisebenzise izilawuli ezengeziwe uma zithola noma yini esolisayo.

Uma ubheka konke lokhu, ukuqinisekiswa kwezinyathelo ezimbili ku-Android kuba ithuluzi elinamandla lokuvikela ama-akhawunti akho: ngokuhlanganisa amaphasiwedi aqinile nezinkinobho zokufinyelela, izaziso ezivikelekile, izinhlelo zokusebenza ze-TOTP, kanye nezipele eziphethwe kahleUkwenza ngendlela yokuthi ukweba ukufinyelela kwakho kudinga izinga lomzamo ongaphezu kwalokho abahlaseli abaningi abazimisele ukukufaka.