Is requiring the user to login using phone number and 2-step verification bad design? I have only seen 2-step verification as an EXTRA layer of protection, not a requirement. The only thing similar is a product like Twilo, that sends you a SMS code, but the code never changes and acts as your password.

Can anyone shed some advice on this concept?

  • 1
    It really depends on your security requirements. Can you share more about your application? – qoba May 16 '18 at 3:52
  • You said, the code never changes and thats the password. I didnt get? – Rafee May 16 '18 at 8:48
  • to login using phone number and 2-step verification do you mean like send them a text to their phone and then ask for the 3 digits pin generated by an app, or only one of them? – Mehdi Bounya May 24 '18 at 11:03

It depends on what you think about using the extra verification for. I worked in the banking sector, and there it make complete sense to add phone number verification for 2 reasons.

1, it is more secure and the users data is safer this way.

2, the psychological factor. The user will feel safer using 2-step verification when handling sensitive information and might tend to using your website over one that doesn't have 2 step.

So analyse what market you will be designing for and then asses this information with the extra effort of 2step verification. In general I would go away from extra verification as it's quite a bit of extra work and users don't like the extra work. Keep it simple is my motto.

But on the other hand for marketing purposes you will have a contact number, which could also come in handy incase you need to contact the customer urgently.

Having a user login only with 2step verification is a valid option, but I would only recommend using it if this level of security is required.

| improve this answer | |
  • thanks for the advice, from the perspective of a user, requiring 2-step is annoying but I guess for the purpose of what I am designing it is a valid reason. – Jessica Zhang May 16 '18 at 21:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.