Skip to content

ParetoSecurity/sms-slack-v3

Repository files navigation

sms2slack: Receive SMS messages and forward them to Slack

sms2slack is a tiny box for a SIM card that receives SMS messages, like 2FA codes, and forwards them to your Slack channel.

Configure page »

PlatformIO CI

Hardware

You can purchase the LILYGO® TTGO T-SIM A7670E/SA board for GSM A (Americas) or E (Europe) region from AliExpress.

3D print templates for the box that fits the AliExpress board.

Schematics for SIM7000x + ESP32

image

FAQ

What carriers are supported?

The selected board supports all LTE CAT-1 carriers and has support for 2G networks. We do not recommend using a (usually cheaper) board that supports only 2G/3G as those networks are getting phased out fast.

How long does it take to put everything together?

If you're comfortable with electronics and a bit of code, it should be less than an hour.

Why

Phone number Two-Factor Authentication is dangerous and inconvenient

Using Two-Factor Authentication with your phone is annoying when coworkers need the code, but you're on vacation, swimming, surfing, or biking. Using a phone number that is publicly shared opens you to the risk of SIM swap and hijacking of your phone number.

We recommend using authenticator apps over phone numbers where possible. Unfortunately, some websites allow only phone number 2FA. For us, two banks did not provide any other option but phone number 2FA.

sms2slack makes it easy to share the 2FA codes between coworkers and not use someone's personal phone or company's publicly available phone numbers.

If you're a digital nomad, you probably use local SIMs when you're traveling, and it's really annoying to put back your home SIM just to get one 2FA code.

As an added benefit, sms2slack is immune to any spyware or viruses sent to it, which cannot be said for your phone.

VoIP and online SMS receiving services do not work for all websites

Our company used Twilio to receive and forward messages to our Slack in the past. Unfortunately, not all websites send messages to these phone numbers. Most notably, Apple, Microsoft, Google, Facebook, and WhatsApp do not, and many of them now require 2FA for business use, and often the only option is a phone number.

There are many other services like Twilio, but they all have this issue. The only option is to have an actual phone number connected to a device. With sms2slack you can use local telecom SIM cards which, from our experience, never have issues receiving messages.

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published