Reference
Verification log
Every publication, update and re-verification across Cleartext, newest first. Each entry is also shown on its own page.
| Date | Page | Revision | Change |
|---|---|---|---|
| Do US banks have to follow NIST SP 800-63? Question | Rev. 1 | First published. | |
| Has any US regulator banned SMS OTP? Question | Rev. 1 | First published. | |
| How can banks defend against SIM swap fraud? Question | Rev. 1 | First published. | |
| How many vulnerabilities are in the CISA KEV catalog? Question | Rev. 1 | First published. Numbers regenerate from the CISA feed on every build. | |
| Is email OTP safer than SMS OTP? Question | Rev. 1 | First published. | |
| Is SMS OTP still allowed under NIST SP 800-63-4? Question | Rev. 2 | Re-verified against SP 800-63B-4; tightened the short answer. | |
| What does “restricted authenticator” mean in NIST SP 800-63B-4? Question | Rev. 1 | First published. | |
| What does the due date in the CISA KEV catalog mean? Question | Rev. 1 | First published. Numbers regenerate from the CISA feed on every build. | |
| What is carrier-based authentication? Question | Rev. 2 | Added a related question on Glide Identity’s MagicalAuth (owner-affiliated coverage) and the Glide Identity topic. Answer text unchanged. | |
| What is Glide Identity’s MagicalAuth, and how is it different from SMS OTP? Question | Rev. 1 | First published as owner-affiliated coverage, written only from Cleartext’s Glide Identity fact sheet and the sources listed. | |
| What is phishing-resistant MFA? Question | Rev. 1 | First published. | |
| What is the CISA KEV catalog? Question | Rev. 1 | First published. | |
| Which countries are banning SMS OTP for banking? Question | Rev. 2 | Added BSP Circular 1213 (in force since June 25, 2026). | |
| Which vendors have the most CISA KEV entries? Question | Rev. 1 | First published. Numbers regenerate from the CISA feed on every build. | |
| Number verification vs silent network authentication Comparison | Rev. 2 | Added a related question on Glide Identity’s MagicalAuth (owner-affiliated coverage). Comparison unchanged. | |
| Number verification vs silent network authentication Comparison | Rev. 1 | First published. | |
| SMS OTP vs authenticator apps Comparison | Rev. 1 | First published. | |
| SMS OTP vs email OTP Comparison | Rev. 1 | First published. | |
| SMS OTP vs passkeys Comparison | Rev. 1 | First published. | |
| Synced vs device-bound passkeys Comparison | Rev. 1 | First published. | |
| TOTP vs push notifications Comparison | Rev. 1 | First published. | |
| How to harden account recovery against SIM swap Checklist | Rev. 1 | First published. | |
| How to migrate a bank off SMS OTP Checklist | Rev. 1 | First published. | |
| How to patch a CISA KEV entry Checklist | Rev. 1 | First published. | |
| How to respond to a SIM swap Checklist | Rev. 1 | First published. | |
| SMS OTP restrictions by jurisdiction Dataset | Rev. 2 | Added BSP Circular 1213 (Philippines) as in force. | |
| Did the UAE ban SMS OTP for banking? Question | Rev. 1 | First published. | |
| Is SMS OTP still allowed under NIST SP 800-63-4? Question | Rev. 1 | First published. | |
| Which countries are banning SMS OTP for banking? Question | Rev. 1 | First published. | |
| SMS OTP restrictions by jurisdiction Dataset | Rev. 1 | First published. | |
| What is carrier-based authentication? Question | Rev. 1 | First published. | |
| What does the FCC SIM swap rule require? Question | Rev. 2 | Clarified the compliance-date history. | |
| What is APP fraud? Question | Rev. 1 | First published. | |
| Who pays when a UK customer falls for an APP scam? Question | Rev. 1 | First published. | |
| How do I know if I’ve been SIM swapped? Question | Rev. 1 | First published. | |
| What is a SIM swap attack? Question | Rev. 2 | Added the eSIM follow-up question. | |
| Are synced passkeys phishing-resistant? Question | Rev. 1 | First published. | |
| How do banks stop OTP bots? Question | Rev. 1 | First published. | |
| What is an OTP bot? Question | Rev. 1 | First published. | |
| What is a SIM swap attack? Question | Rev. 1 | First published. | |
| What does the FCC SIM swap rule require? Question | Rev. 1 | First published. | |
| What is BSP Circular 1213? Question | Rev. 1 | First published. |