Multi-Factor Authentication (MFA) using authenticator apps is more secure than SMS-based OTP.
- True
- False
Answer: True
Authenticator apps (Google Authenticator, Authy) generate TOTP locally, immune to SIM swapping, SS7 attacks, and phishing that compromise SMS OTP. NIST recommends moving away from SMS for high-security applications. Critical for authentication best practices questions.