3 ms·
You may not be the best example of how this can help, sounds like you have good security sensitivity. Where I'm working now, we deal with several credential lo
by DEADBEEFC0FFEE 8y ago
You may not be the best example of how this can help, sounds like you have good security sensitivity.
Where I'm working now, we deal with several credential loss incident each month. Invariably, our users are tricked into authentication via a bogus site. 2FA would protect the credentials from being used by unauthorised people. Our staff are encouraged to use password managers, but that does not help this situation.
- dwaite 8y agoTOTP can protect against knowledge leakage as it is a second factor. For example, it will prevent someone successfully using a shared password a LinkedIn, associated with a corporate email address, to log into Gmail/O365. It doesn't prevent any sort of active phishing campaign, because the login process can just ask for and immediately use the TOTP credential. User gets a possible failure (or just content based on what they thought they were accessing), phisher gets account access.