Its surprising how hackers can steal your phone number by assigning it to a different SIM card, then use it to reset your passwords, but now Instagram is working on a new way of authentication.
The traditional 2-factor authentication method relies on an SMS to a phone number isn’t safe from hacking. According to recent reports, by Motherboard, hackers can steal your Instagram account by porting your phone number onto a different SIM card and simply requesting to change your password; all this, without you ever knowing.
To thwart SIM hackers, Instagram is building a non-SMS 2-factor authentication system that will work with security apps like Google Authenticator and more, in order to prevent from SIM-based theft or hacking. The prototype version of the updated two-factor feature has been found in Android version of Instagram’s APK code, which was discovered by tipster Jane Manchun Wong. In a tweet she expressed her excitement over the new discovery, which reads: “Instagram is finally working on token-based two-factor authentication!! “Thank you Instagram! I have been waiting for this since 2016! We finally won’t have to rely our account’s security on SMS.
Although, The non-SMS based 2FA process, which will use third-party authentication apps like Google Authenticator or Duo. These apps generate a code, which is similar to an OTP, but this code cannot be generated on a different phone in case a hacker ports your number to their SIM. The feature will generate new token for a limited time and users can simply use username and password along with the token to securely login into their accounts. An Instagram spokesperson confirmed invading statement that : Instagram is “continuing to improve the security of Instagram accounts, including strengthening 2-factor authentication.
“Any type of number can be ported,” Roel Schouwenberg, the director of intelligence and research at Celsus Advisory Group, told the publication. “A determined and resourced criminal actor will be able to get at least temporary access to a number, which is often enough to successfully complete a heist.”
This easy access to SIM swapping has turned your phone number into a master key that can be easily accessed and temporarily taken control of. While Instagram, which took its sweet time to even offer this kind of 2FA, works on delivering better security options, take your time and set up a security app like Google Authenticator or Duo to protect your Account.
These new 2FA authentication feature is said to roll out soon.
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
