Checklist
SMS OTP flow inventory
Every place your organization still sends a code, ranked by where fraud cashes out.
Format6 checklists
Checklists
One-page, printable versions of our field guides. Take them into the meeting.
Checklist
NIST 800-63B-4 restricted-authenticator file
The four conditions for keeping SMS or voice codes, and the evidence to keep for each.
Checklist
SIM swap: the first hour
Containment and verification steps when a customer’s number may have been hijacked.
Checklist
Passkey launch readiness
What to settle before offering passkeys to customers or staff.
Checklist
OTP bot hardening
Controls that narrow the window for code-relay attacks while codes remain.
Checklist
Questions for SMS OTP alternative vendors
Eight questions to put to every vendor, in writing.