Linking PC to mobile phone

GDB2222

Under Windows I linked my Android phone to my desktop PC. It actually works well, and I can do things like view my phone messages on the PC. 

Those messages include all the 2FA ones, which saves me hunting round the house until I track the phone down, but it doesn't seem very secure. It sort of turns 2FA back into 1FA. 

Any thoughts?

born_again

Why?
Computer only links to phone when in range. 

flaneurs_lobster

I kind of agree, not only do you not have to find the phone, you don't need to unlock it either.

But for sheer convenience, when you are cut'n'pasting SMS OTP codes a dozen times a day, I'll live with the compromised security.  

But only at home.

Vitor

Yes, if someone compromises your Windows account, or your PC is left unlocked, they can read the 2FA SMS messages too. That makes it effectively single-factor again. If you’re using 2FA for banking or critical accounts, keep those codes isolated by using an Authenticator app.

GDB2222

born_again said:

Why?
Computer only links to phone when in range. 

My PC does not have Bluetooth, so it seems to be a wifi connection. Or, possibly, using mobile data. 

sausage_time

I view text messages on my Android phone by pairing with https://messages.google.com/web/conversations on my browser.

It's tied to my secured laptop, and is specific to that browser on that laptop.  So I feel OK with any compromise, and it does make copying and pasting 2FA SMS much easier!

2FA on SMS is inherently insecure in any case - and where possible I set up my accounts to use an authenticator app for 2FA.

Grumpy_chap

I disabled the phone link to PC as I wasn't sure what data was exchanged in each direction.

For 2FA, I receive the codes on my smart watch which is convenient and avoids needing to grab the phone.

Vitor

 - For 2FA, I receive the codes on my smart watch which is convenient and avoids needing to grab the phone. - 

I'm assuming the codes arrive at the phone by SMS which is the least secure bearer for 2FA

Grumpy_chap

Vitor said:

 - For 2FA, I receive the codes on my smart watch which is convenient and avoids needing to grab the phone. - 

I'm assuming the codes arrive at the phone by SMS which is the least secure bearer for 2FA

Yes, they do.