Traditional MFA factors like SMS or Voice call OTP is not secure and prone to different kind of attacks like Phishing, SIM swap, Man in the middle, brute force etc. JumpCloud has made a conscious decision not to support SMS or Voice call for OTP considering the security risks. It is not mandatory to use Protect, users can use authenticator app of their choice like Google for TOTP. Programmable token or Security keys can also be used.
