Furaha sirta ah waa hal xayndaab. Haddii uu baxsado - xatooyo xog ah ama phishing - akoonkaagu wuu furan yahay. Xaqiijinta laba-tallaabo ah waxay ku darsataa xayndaab labaad.
Noocyada 2FA
Koodhka SMS-ka waa kan ugu fudud laakiin ugu daciifsan, maxaa yeelay lambarka waa la af-duubi karaa (SIM swap). Barnaamijyada koodhka (authenticator apps) way ka ammaan badan yihiin. Furayaasha adag ee jireed (security keys) ayaa ugu adag in la jabsado.
Passkeys
Passkeys waa hab cusub oo ku salaysan heerarka FIDO. Beddelka furaha sirta ah, aaladdaadu waxay kaydisaa fure kiriptoraafi ah, waxaadna ku gelisaa faraha, wejiga ama PIN-ka aaladda. Ma jiro fure la xadi karo oo server-ka ku kaydsan, phishing-na kuma shaqeeyo.
Sababta SMS-ku u daciif yahay
Hay'adda heerarka Maraykanka (NIST) waxay hagaheeda SP 800-63B ku sheegtay in koodhka SMS-ka loo arko hab "xaddidan" (restricted), maxaa yeelay fariinta waa la leexin karaa, lambarkana waxaa loo wareejin karaa SIM kale. Taas macnaheedu ma aha in SMS-ka gebi ahaanba laga tago: haddii adeeggu aanu bixin hab kale, SMS ayaa weli ka ammaan badan fure keliya.
Maxay passkeys-ku uga adag yihiin phishing?
Phishing-ku wuxuu ku shaqeeyaa in laguu horseedo bog been ah oo u eg bogga dhabta ah, si aad ugu qorto furahaaga ama koodhkaaga. Passkey-ga wuxuu ku xiran yahay ciwaanka (domain) bogga dhabta ah, sidaas darteed aaladdaadu uma isticmaasho bog been abuur ah. Taasi waa sababta CISA ay xaqiijinta ku salaysan FIDO ugu tilmaanto mid u adkaysata phishing (phishing-resistant MFA). Si aad u barato calaamadaha khiyaamadan, akhri hagahayaga phishing-ka.
Haddii aad taleefanka beddesho ama lumiso
Passkeys-ka badankood waxay ku dhex mari karaan aaladahaaga maareeyaha furayaasha ee nidaamka (tusaale iCloud Keychain ama Google Password Manager) ama barnaamij fure-maareyn. Hubi in akoonkaas laftiisu leeyahay 2FA, oo ka hor intaadan taleefanka beddelin, xaqiiji in aaladda cusub ay passkeys-ka heshay.
Meesha laga bilaabo
Ku dar 2FA emailkaaga marka hore - waa albaabka dib-u-celinta akoonnada kale oo dhan. Kadib, bangiga, baraha bulshada iyo kaydka sawirada.
Koodhka gargaarka
Marka aad dejinayso, kaydi koodhadhka gargaarka (backup codes) meel ammaan ah oo aan aaladda ku jirin. Haddii kale, lumidda taleefanku waxay macnaheedu noqon kartaa lumidda akoonka.
Xigasho: FIDO Alliance; CISA, "Implementing Phishing-Resistant MFA"; NIST SP 800-63B.
