Totally agree, fallback to SMS after enabling Authy kinda defeats the purpose of stronger 2FA
Security through obscurity doesn’t work, and relying on phone-based 2FA is risky
I’ve even used invisible text https://textoinvisible.co/ just to test how apps handle unexpected input. You'd be surprised how many systems still don’t validate things properly
Disabling weak fallbacks should definitely be an option
Totally agree, fallback to SMS after enabling Authy kinda defeats the purpose of stronger 2FA
Security through obscurity doesn’t work, and relying on phone-based 2FA is risky
I’ve even used invisible text https://textoinvisible.co/ just to test how apps handle unexpected input. You'd be surprised how many systems still don’t validate things properly
Disabling weak fallbacks should definitely be an option