Domain
Identity questions
Authentication, passkeys, SIM swap and carrier-based verification: how people prove who they are, and how attackers get around it.
Questions #
- Are synced passkeys phishing-resistant?
Yes.
- How can banks defend against SIM swap fraud?
Stop treating an SMS code as proof of identity for high-risk actions such as password resets, new payees and contact-detail changes.
- How do I know if I’ve been SIM swapped?
The clearest sign is that your phone suddenly loses service where coverage is normally fine, and calls and texts stop arriving.
- Is email OTP safer than SMS OTP?
Not meaningfully.
- What is a SIM swap attack?
A SIM swap is when a criminal gets a mobile carrier to move a victim’s phone number to a SIM or eSIM they control, by impersonating the customer, bribing an insider or taking over the carrier account.
- What is carrier-based authentication?
Carrier-based authentication verifies a user through their mobile operator instead of sending them a code.
- What is Glide Identity’s MagicalAuth, and how is it different from SMS OTP?
MagicalAuth is Glide Identity’s product for replacing SMS one-time passcodes.
- What is phishing-resistant MFA?
Phishing-resistant MFA is authentication that a fake website or man-in-the-middle cannot capture and replay, because the credential is cryptographically bound to the real site.