2FA, or two-factor authentication - Number is stored!!!

[Molecule88]

The thread is here now. Can any admin or mod clarify on this?

 

[hwzadmin]

Dear Members,

Two-factor authentication, or 2FA, is a security process whereby users provide two means of authentication. This usually includes a physical device (such as a token, or in HardwareZone's case, a mobile phone).

As the name implies, a member's account is verified through more than one factor. The first and most common factor of authentication are your passwords. We have introduced a new factor to secure the creation of HardwareZone accounts by spambots and phishers.

2FA is presently used by: DBS, Google, Twitter among many companies and sites.

Your mobile numbers are NOT stored by our servers or any third parties. Our 2FA system relies on a hashing function to identify if a mobile number is used above a set limit.

More information about hashing can be found here: Hash function - Wikipedia, the free encyclopedia

In layman's terms, your numbers e.g. 91204317 is not saved, but hashed into a simple number e.g. 91204317: 00001. Our system then records the hash 00001 has created one account.

In this user's case, the two registered accounts aren't as long ago as implied because accounts created before our introduction of this system are not affected.

Hi,

i have tried to register one more account for my partner using my mobile number but encountered this below: (1st & 2nd account registered long time ago, have already lost the email), this is my third account.

When I try to register for my partner, it prompt this.

"You can only reuse a number up to 3 times for 2FA authentication"

HWZ mentioned our mobile number will not be stored but in fact it is stored. Trying to bluff us???? What your take?