5 Most Popular Two-Factor Authentication Security Devices

As we had discussed before, one-factor authentication is not sufficient in order to have good security. Especially when we talk about sensitive transaction such as banking transactions, it is not secure anymore today if it were done only using username and static password.

Two-factor has to come into the IT security field to ensure that the correct person is authenticated. The items below are the five most popular methods used for any two-factor authentication.

1. Mobile OTP

Mobile One-Time Password

Mobile One-Time Password (OTP)

A very popular and cost saving method is to use a SMS gateway and send OTP (one-time password) to a mobile phone user. This method is used widely simply because everyone has a mobile phone today which means everyone can use two-factor authentication as long as the host of the application willing to invest and provide this service.

2. OTP Token

One-Time Password Token

One-Time Password (OTP) Token

OTP token works more or less the same as the Mobile OTP. The difference is that this is a separate device and the OTP can be generated immediately instead of waiting for the SMS gateway to send. As a result, it is more reliable than the Mobile OTP but additional cost needed to have this device.

3. PKI USB Token

Public Key Infrastructure Token

Public Key Infrastructure (PKI) Token

PKI USB Token offers the second best security in the market by beating off man in the middle attack such as phishing attack. However, PKI implementation needs an infrastructure where it is going to be costly. Due to the cost matter, PKI is not well known in certain countries as people will go for OTP to have the balance of security and investment cost.

4. EMV Cap OTP with Signature

Europay, MasterCard and VISA Cap One-Time Password with Signature

Europay, MasterCard and VISA (EMV) Cap One-Time Password (OTP) with Signature

EMV Cap OTP offers the best security around as it not only beats off the man in the middle attack, but also the man in the browser attack. This is simply because the user needs to sign the transaction using the EMV card reader instead of the web browser. As a result, the Trojan of the man in the browser will no longer work. The drawback is that, signing with transaction device can be a tedious thing to do. The user needs to enter correctly the recipient’s account number and the amount in order to perform the transaction successfully.

5. Out of Band Transaction Detail Verification

Out of Band

Out of Band

This method provides the best security similar to the above and solves as well the weakness of the EMV Cap OTP. What this method does is to send the user the details of the transaction such as the recipient’s account number, amount and the OTP code via non-internet channel such as voice call or SMS. The user will verify those details given and confirm the transaction by submitting the OTP code into the web browser. This gives great security but not anything more after that. Unlike PKI, that piece of digital certificate can do not only authentication signing, but also document signing, PDF signing or even data encryption.

Nothing is perfect in this world where everything has its good and bad. You have to clearly define what you want and I’m sure you can find the device that is suitable to you.

12 thoughts on “5 Most Popular Two-Factor Authentication Security Devices

  1. To tell you the truth I knew only one of these methods as I use it quite often, but as far as I understand some very clever guys can even break these devices or systems. Is there anything that can n’t be broken?

    • There isn’t indestructible security 😀

      Everything should have its weakness and strength. It really all depends on the user whether how smart is the user in staying safe.

      Probably my next article is going to be the pros and cons of those devices to see which device suits what type of user.

  2. Hey Alan,
    This is interesting, I know only three of those methods so its news to me and I’m definitely getting more information. With thefts and hacks on the rise it has become a great concern that we’re secure with our online accounts and transactions. We cannot afford to be careless or ignorant on Security Devices.

  3. This is a nicely done article. Very informative for the consumer.

    I also like it because explains something that is sometimes looked upon as being a tedious formality. In our age of instant access it’s sometimes difficult for people to appreciate an extra step, even though it’s meant to protect them.

    Most of us in the US have experienced the Mobile OTP at least. Your article does a nice job of describing the reasons that we take that extra step along with the higher levels of security that are available.

    • Christopher (admin team)

      It’s always better to be safe than sorry!

      Thanks for the comment Darci, welcome to the community 🙂
      Christopher – Admin Team

Leave a Reply

Your email address will not be published. Required fields are marked *