3 ms·

How is TOTP terrible? How are security keys terrible?

• dijksterhuis 5y ago
  Parent could be talking more about vendor lock-in rather than protocols. At least that's my bug bear with this. I know 2FA SMS is less secure, but I'm sticking with it as long as MS require a MS app (or I'm forced off SMS 2FA).
  • ryanlol 5y ago
    MS doesn’t require a MS app unless they’ve changed something recently.
    • dijksterhuis 5y ago
      Oh FFS! It's a hidden menu option when you go to [1]. Have to click Configure App Without Notifications once you click Setup Authenticator App. Two years of misery and stubbornness. One hidden menu option. [1]: https://account.activedirectory.windowsazure.com/proofup.aspx?proofup=1 https://account.activedirectory.windowsazure.com/proofup.asp...
  • soundnote 5y ago
    Any TOTP works fine, they just advertise their own obviously, and it has extra conveniences for their own accounts.
    • kortex 5y ago
      Ah, ok. They make it sound like it _has_ to be their flavor of OTP. That's...slightly better, I guess. I still want passwords though as the base level.