Every time I sign-on to one of my account sites - pharmacy, insurance, banking, credit card etc. - and it sends a verification code to my phone of up to 8 digits, I'm thinking that it's just some bullshit feel-good thing, rather than providing any real security. Often, it has my cell phone number registered, so that makes at least some sense, but I still don't understand why the verification code has to be 8-digits, or anything more than 3. But it gets weirder; on some accounts, it asks me for the number to send the text to. How is that providing any security?
And what about changing the password every 90 days. What is this preventing? So someone cracks your account password, but then waits a few months to use it? Does any of this really work?
And what about changing the password every 90 days. What is this preventing? So someone cracks your account password, but then waits a few months to use it? Does any of this really work?