---
id: 1956
title: "Getting 2FA Right in 2019"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2019/06/20/getting-2fa-right-in-2019/"
published_at: "2019-06-20T10:50:12Z"
tags: ["pypi", "authentication", "account-security", "2fa", "webauthn", "totp"]
phying_url: "https://phying.com/item/1956"
lang: en
---

# Getting 2FA Right in 2019

## Summary

With PyPI now supporting TOTP and WebAuthn, Trail of Bits shares lessons from adding 2FA to Warehouse: second factors must be something you have or are, SMS is broken, and WebAuthn beats TOTP.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2019-06-20T10:50:12Z
- **Original:** https://blog.trailofbits.com/2019/06/20/getting-2fa-right-in-2019/
- **Phying News:** https://phying.com/item/1956