3 ms·

If you can do the second factor, why bother with the password?

• PeterisP 7y ago
  A simple password or a pin code does mitigate quick attacks of opportunity using lost or stolen physical factor; and adds non-repudiation if someone uses someone else's token - you can't just say "oh we must have accidentally swapped our cards at lunch" if you had to enter their pin as well.
  • freeone3000 7y ago
    Given the existing password hygiene, I think it's more likely that any new PIN or password would be treated in the same manner as the existing ones, and would just be an additional hassle.
  • yencabulator 7y ago
    Serious question: How often do such employees/contractors claim to have accidentally swapped keys at lunch?