3 ms·
The big advantage of a U2F key over other forms of 2FA is that it gives you stronger protection against phishing. Phishing attacks that would give me control of
by idlewords 10y ago
The big advantage of a U2F key over other forms of 2FA is that it gives you stronger protection against phishing. Phishing attacks that would give me control of your email with other forms of 2FA don't work if you use a security key.
Unfortunately, phones still don't support a physical security key. But you can still use the authenticator app there. On your laptop, U2F is a big step up.
Whatever you decide, you should not use SMS as your second factor. U2F keys, TOTP (the authenticator app) and push notifications are all significantly safer.
- adamwoodetc 10y agoThanks, this is the spine of Ceglowski's argument also and I'm pretty much persuaded by it. I was just curious whether there were any significant downsides, but it appears that there aren't really. Thanks for your time.
- chrisked 10y agoIf I'm not mistaken the author himself just replied to your question. It's him ;-)
- idlewords 10y agoIt's one of my many sock puppets!
- adamwoodetc 10y agoWhoa. Never mind systems that ensure it's me using my account, it sounds like I need a system to tell me how many of the people I'm conversing with are the people I'm conversing about. Sorry for the confusion @idlewords. (For the record I'm not ruling out the possibility that @chrisked is also you Maciej. Fool me once...)
- idlewords 10y agoI'm actually the only person on this site.