I need to enable 2FA for an account, and they provide 2 options; SMS and Symantec VIP Access app.

I do use other Apps suck as OKTA, Duo Mobile, Github, 1Password, ID.me Authenticator, but I never heard of Symantec VIP Access app before. Any opinions? Do you trust Symantec these days?

Through our partnership with Symantec, use Symantec’s free Validation and ID Protection (VIP) Access app, which generates a randomized 6-digit code on your Mac, PC, or mobile phone each time you attempt to log in. To complete your login, you‘ll then be prompted to enter the code from your VIP app, which is valid for 30 seconds.

Just use whichever you prefer. Generally speaking, I prefer using authenticator apps as they’re easier to use and more secure than sms. 1Password can often be used as an authenticator app although I’m not sure if that’s the case here. Otherwise just use whatever is most convenient. Any 2FA is miles better than no 2FA.

---

Symantec uses the same TOTP standard that everyone else uses, but they obscure that fact by using a number instead of an image. So, there's no special reason for the site not having a QR code as well, except where they have a partnership/kickback arrangement with Broadcom (Symantec) and are being jerks about it.

Many sites still offer a QR code for other apps if you look carefully for the link.

Unfortunately, a bunch of finance sites have financial ties to Broadcom and only allow the use of that app.

If you can get a QR code from the site, just scan it with your preferred Authenticator app (I use Google Authenticator and MS Authenticator). Otherwise... Now you have yet another authenticator app wasting space on your phone.

---

SMS is trash for real security - easy to highjack your phone number.

If it is something you really care about (banks, money, crypto) use the app. If is your newpaper login think whatever.

Have been using VIP Access for about 10 years - though seems like most are migrating to something else.

SMS is frowned upon by security experts and those knowledgeable of the technology because your phone number can be "SIMjacked" wherein someone duplicates or steals your phone number to retrieve those codes.

Probably not going to happen to you, but not an impossibility, as ADent said, don't use SMS for anything you care about losing access to or that has access to things you care about (money, health info, your facebook or google accounts.)

---

g=