Topic: PSA Email is NOT 2FA on Blockchain.info learn how to secure Bitcoin properly! - page 2. (Read 2628 times)

Yes well that is why I recommend Yubikey in my guide.

So, it seems, neither email nor sms is good for 2FA. Better dont use 2FA. Create an offline wallet for cold storage.

You cannot think of email as 2FA. All it takes is a keylogger or virus to get your password and bye bye Bitcoins. Never rely on email for so-called 2FA!

Email still is 2-factor though it is easier to compromise, but I would recommend using the sms 2-factor if you can. Much safer.

Social engineering is the way

But they would need to know your number in the first place.

How is this possible? Do sites state your number?

2FA is not the best way to secure your coins, especially if u r using SMS authentication.


Source: https://twitter.com/wiz/status/528806600941662209

I've had enough of seeing people who have been hacked and lose coins on blockchain.info so here is a guide for beginners to make your coins 100% secure and safe from hackers.

1.) Use a gmail account with google auth 2FA to sign up for your blockchain wallet

2.) Buy a Yubikey (https://www.yubico.com/products/yubikey-hardware/yubikey-2/) and use this for 2FA to further secure your wallet at blockchain. You now have TRUE 2FA on both your wallet and your email account associated to the wallet. You can also recover the private keys to your blockchain wallet via email if you need to recover your wallet in future

3.) Do NOT lose your Yubikey or your google auth code. Back up your google auth code and Yubikey is virtually indestructible so take it everywhere with you and keep it safe.

4.) Do not have too many coins on blockchain.info. They have very good security but they may be internally hacked one day.

5.) For full security for beginners I recommend something like Trezor https://www.bitcointrezor.com/

Do NOT use TOR as rogue nodes may steal your information. This has happened many, many times to many different people!

Remember email is NOT 2FA as it is too easy for your email to become compromised. You MUST use TRUE 2FA like Yubikey at blockchain + google auth on email is a good combo. Even if you do get a keylogger on your PC your coins will be safe but always scan for viruses often and use a professional anti virus suite like Kaspersky.

NOTE: You can also use SMS 2FA on blockchain.info instead of Yubikey but I prefer Yubikey and as some have mentioned below SMS is not entirely secure.

DISCLAIMER: This guide is based on my understanding of these technologies only and I cannot make any guarantees. However if you follow the steps above you will be MUCH MORE secure and protected from most vulnerabilities your average hacker will go for.