ACSP Suggestion 2022.29: Allow Phone Numbers Outside of the ARIN Region to be Eligible for SMS Two-Factor Authentication

Suggestion

Author: Andy Beverly   
Submitted On: 03 November 2022

Description: Enable non-ARIN mobile numbers for SMS 2-factor authentication

Value to Community: This would enable administrators who have a mobile phone number outside of the ARIN region to be able to use SMS for 2-factor authentication.

Timeframe: Not specified

Status: Closed   Updated: 24 August 2026

Tracking Information

ARIN Comment

7 November 2022

Thank you for your suggestion, numbered 2022.29 on confirmed receipt, requesting that ARIN enable SMS for two-factor authentication (2FA) for customers who reside outside the ARIN service region.

ARIN will have four options for customers to set up 2FA on their ARIN Online accounts prior to 1 February 2023, when we require accounts to be secured:

  • Time-based One-time Password (TOTP) using an authenticator of your choice
  • Short Message Service SMS or Voice Call for customers within the ARIN service region
  • FIDO2/Passkey (available January 2023)

We continue to receive input from customers for additional options, and plan to conduct a Community Consultation to assess support for continued development related to 2FA for ARIN Online accounts. Your suggestion will remain open pending the outcome of the consultation and any potential related development effort.

Thank you for participating in the ARIN Consultation and Suggestion Process.

Regards,

American Registry for Internet Numbers (ARIN)

24 Aug 2026

Thank you for your suggestion, numbered 2022.29, asking that ARIN enable non-ARIN region mobile numbers for SMS two-factor authentication (2FA) / multifactor authentication (MFA). When we last replied to this suggestion, we stated that we would conduct a Community Consultation to assess support for continued development related to 2FA/MFA for ARIN Online accounts.

Since that time, we have made improvements to allow software passkeys, and we have determined through experience that the limited supported out-of-region mobile numbers were creating a costly attack vector. Because of the real cost, and the variety of other authentication options, we have no plans to enable any new non-ARIN region mobile codes for SMS authentication.

Thank you for participating in the ARIN Consultation and Suggestion Process. ‹

Related