Are there other ways of two-factor authentication?

Question

Malware

Many sites and web services offer the use of two-factor authentication (sms) to better secure user accounts.
On the one hand, this is good. But on the other hand, a person "burns" his phone number.
Even if you are not a criminal, it still becomes uncomfortable that someone can very easily figure you out by your phone number.
Are there other ways to two-factor authentication on sites and services other than using sms?
It seems that there are special applications for this. Or do they also involve a phone number?

Answer 1

The task of two-factor authorization is to protect authorization data from interception. There is a division into 2 independent data transmission channels to prevent possible interception on a single channel.
You can do this:
1. After registration, an HTML page with a JS code (formula) containing a PIN generation formula (based on timestamp, userid, etc.) arrives in the mail. This HTML file can be saved anywhere on any device, preferably without internet access.
At the request of the user, it is possible to bind to subnets or country when issuing a PIN code.
2. Run HTML-ku and get a PIN-code on the screen.
3. Enter it in the field: "PIN".

Answer 2

RFC 4226
RFC 6238
both are implemented in the form of phone software, both do not require "shine" the number the
next stage of paranoia - they are the same, but in hardware implementation:
https://yandex.ru/images/search?text=etoken%20otp

Answer 3

https://www.authy.com/
https://play.google.com/store/apps/details?id=com....
number both there and there

Answer 4

OTP :) and the phone does not burn

Answer 5

You can have keys.
But it's inconvenient.
There are special devices with one-time passwords.
But they cost money.
Etc.
You can invent anything.
It's just not very convenient.

Answer 6

Send code to email.

Answer 7

There is such an interesting option - authentication using images
(but I think this is more of a concept)
https://github.com/semaster/2FAuth-Steganography