VK introduces 2FA and plans to make it obligatory in 2022

VK is lastly introducing two-factor authentication on all its companies and plans to make it obligatory in February 2022 for directors of huge communities.

VKontakte, or extra generally often called VK, is Russia’s hottest social media platform with over 650 million customers,

Beginning in February, all communities that rely over 10,000 subscribers should be managed by a 2FA secured admin account to forestall large-scale phishing incidents.

There are over 140,000 communities of this measurement on VK, so this elevated safety requirement impacts a substantial variety of customers on the platform.

The latest instance of such an incident was seen this Monday when scammers hacked into the official Yandex Go group on VK and despatched phishing messages to all of its subscribers.

The platform was capable of regain management of the compromised account inside two minutes, however some customers had already misplaced cash consequently.

The brand new consumer safety program that provides 2FA on all companies known as ‘VK Shield‘ and also will embrace a safety management heart for customers, serving to them assess their safety stance, entry new privateness settings, and comply with related tips about the way to enhance their account safety.

Anton Antropov, VK Info Safety Director, acknowledged (translated) the next regarding the upcoming options:

We’re making a complete system to enhance consumer security. Our aim will not be solely to offer technical safety for profiles and information utilizing current instruments comparable to two-factor authentication and encryption, but in addition to assist folks use them correctly.

In the identical context of preventing phishing and safety gaps that might be hiding within the platform’s apps and companies, VK  has additionally introduced the restart and growth of its bug bounty program.

2FA will not be at all times safe 

Whereas rolling out 2FA for all VK companies is undoubtedly a optimistic improvement for the protection and safety of the platform’s customers, it’s not at all times an ideal system for securing your accounts.

Two-factor authentication is usually set as much as ship one-time passcodes (OTP) through SMS textual content. Nevertheless, if a consumer positive factors entry to your telephone quantity through a SIM swap assault, they are going to be capable of entry these OTP codes.

When configuring 2FA, it’s suggested to make use of an authenticator app, comparable to Authy or Google Authenticator, that’s solely accessible by means of your gadget. This fashion, if a menace actor performs a SIM swap in your cellular gadget, they are going to nonetheless not have entry to your 2FA codes.

All in all, customers should not rely on 2FA alone however as an alternative take a holistic strategy in terms of account safety and their on-line presence generally. This strategy contains utilizing distinctive, robust passwords for each on-line account and being looking out for focused phishing emails.