4 ms·
WebAuthN is not supposed to be the only way you log into a service. The credentials are permanently tied to your Authenticator of choice, which can be lost or s
by snuxoll 6y ago
WebAuthN is not supposed to be the only way you log into a service. The credentials are permanently tied to your Authenticator of choice, which can be lost or stolen at any time.
If you change devices you just provision the new one for your account after signing in with a traditional username/password(/2nd-factor).
- GoMonad 6y agoFIDO/WebAuthn has been designed to be first factor authentication (passwordless) as well as 2FA. Though, I agree lost and stolen devices are a problem whose solution space needs more exploring than simply multiple auth devices.