KPN mandatory SMS authentication: Difference between revisions
The KPN mandatory SMS authentication policy requires all customers to use mobile-based two-step verification (2FA) for account access. No landline or alternative verification methods are officially supported, which limits accessibility for users without mobile devices and raises concerns about consumer choice and security resilience. The rollout began systemically in 2024 and affects all MijnKPN accounts. |
|||
| Line 10: | Line 10: | ||
==Background== | ==Background== | ||
{{Ph-I-B}} | {{Ph-I-B}} | ||
KPN’s MijnKPN service provides customer access to billing, subscription management, and account settings for broadband, television, and mobile services. In 2024, KPN introduced mandatory two-step verification (2FA) to improve account security. While 2FA is a common security measure, KPN’s implementation relies exclusively on SMS messages to mobile phones, with no officially supported landline, email, or hardware token alternatives. (Security.nl | |||
) | |||
==[Incident]== | ==[Incident]== | ||
Revision as of 22:05, 24 February 2026
Background
KPN’s MijnKPN service provides customer access to billing, subscription management, and account settings for broadband, television, and mobile services. In 2024, KPN introduced mandatory two-step verification (2FA) to improve account security. While 2FA is a common security measure, KPN’s implementation relies exclusively on SMS messages to mobile phones, with no officially supported landline, email, or hardware token alternatives. (Security.nl
)
[Incident]
[Company]'s response
Lawsuit
Consumer response
References
- ↑ ref goes here