Unverified50% confidenceFactExact time
In SP 800-63B, the U.S. NIST lists SMS OTP as a 'restricted' authentication method and does not recommend it for high-security scenarios.
1
Sources
50%
Confidence
Long-term
Relevance
11/2/2026
First Seen
Sources
账户接管攻击全解析：四大入口与防御策略
Related Entities
Related Claims
Unverified美国NIST发布了IoT设备网络安全指南（NISTIR 8259），但目前仍以自愿遵守为主69% similarUnverifiedNIST 在 SP 800-63B 指南中不再强制用户定期更换密码，而建议在发现凭据泄露时立即更换65% similarUnverifiedISO/IEC 20889:2018 is an international standards framework that systematically organizes privacy-enhancing technologies, and NIST SP 800-188 also provides a referenceable technical framework for anonymization.64% similarUnverifiedNIST's incident response framework is numbered SP 800-61, and ISO 27035 is the information security incident management standard.64% similarUnverifiedTraditional SMS OTP has been gradually replaced by more secure solutions such as TOTP, FIDO2/WebAuthn-standard hardware security keys, and on-device biometrics due to the risk of SIM card hijacking.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1127391API
curl https://kongchang.com/api/v1/knowledge/claims/1127391MCP
get_claim(id=1127391)