Index
Comparisons
Side-by-side tables with a verdict, for the authentication decisions teams argue about most.
- Number verification vs silent network authentication
Largely the same check under two names.
- SMS OTP vs authenticator apps
Authenticator apps are better than SMS because the code is generated on the device, so a SIM swap or intercepted text can’t expose it.
- SMS OTP vs email OTP
Neither is strong.
- SMS OTP vs passkeys
Passkeys are more secure on every attack that matters for consumer logins: they can’t be phished, relayed by an OTP bot or redirected by a SIM swap.
- Synced vs device-bound passkeys
Both are phishing-resistant, because both are bound to the website’s domain.
- TOTP vs push notifications
Neither is phishing-resistant.