3 ms·
I started using their "Account Key" process, any time I log in on the site from a computer, I get a notification from my Yahoo sports app (iPhone) asking me if
by tbomb 10y ago
I started using their "Account Key" process, any time I log in on the site from a computer, I get a notification from my Yahoo sports app (iPhone) asking me if I would like to allow the login attempt. I actually like it better than the two-factor auth I use for other accounts. Whether it's more secure or not, I don't know..
EDIT: just for clarification, this replaces the password entirely. So I never enter a password on the site.
- pkaeding 10y agoIf you don't enter a password, then it isn't two factor auth at all. It just swapping one-factor (something you know) for another (something you have).
- amenghra 10y agoif something you have requires a password, you still have two-factor. Kind of.
- pkaeding 10y agoRight, but in this case, it does not require a password. So it is not two-factor.
- tbomb 10y agoI know that it's not, I just said that I like it better than the two-factor auth that I use elsewhere. If I need to pull out my phone; its just easier to click my notification and click "approve", than to go to Authy to get the 6 digit code, and type it in to my computer.
- pkaeding 10y agoSorry, I misunderstood your statement. I thought you were comparing it to 2FA elsewhere. Now I see that you were just comparing it to the second factor elsewhere (not the whole 2FA0).
- xp84 10y agoCan you help me understand how it replaces the password entirely? What if I lost my phone, or just deleted their app? Does it basically fall back to letting you click a link in your email to approve logging in? Or, SMS, or...? I've been skeptical of it. Fortunately iCloud Keychain means my current Y! password is random as hell and not reused anywhere, but I'm slightly nervous wondering what the hell password I had in 2014 or 2012 or whenever this stupid leak happened. :/