As security becomes more important than ever, hackers are applying new techniques to attack websites and damage them with catastrophic impacts. A majority of such attacks focus on compromising user accounts to steal private/personal data or take the control of an account and use it for different purposes like stealing money. Since relying on a single password is not a very secure way to manage user accounts, having a 2-step verification system is necessary for many sites with critical information.

In this article I explained different steps to implement a simple 2-step verification system for user accounts in ASP.NET MVC using Twilio as the platform of SMS communication. Although this is a simple prototype, it’s easy to expand the idea to larger scales as well as ASP.NET Web Forms to build more secure sites on the internet.