10/29/2025 | News release | Distributed by Public on 10/29/2025 11:21
Assistant Professor of Information Technology Management Mahesh Boodraj had his paper, "Beyond Passwords: A Review of the Hidden Risks in Two-Factor Authentication," published in the Journal of Systems and Information Technology.
Boodraj's study examines the potential downsides of two-factor authentication (2FA), a common method used to boost cybersecurity by requiring users to verify their identity through two separate steps, such as a password and a text message code.
While 2FA is generally seen as a strong defense against hacking, Boodraj and his co-authors found that adding a second authentication factor can create new problems. Through a review of 52 studies, they discovered that 2FA systems require significant computing power, raise operational costs, and even lead to user trust and adoption challenges, along with other unexpected security risks.
Boodraj's work aims to shed light on the importance of carefully evaluating 2FA systems before implementation and calls for more consistent, wide-ranging research to help organizations design safer, more reliable authentication methods.