Importantly though it's a good single factor. Passwords aren't good. 1. They get repeated. 2. They get phished. Even just as a single factor, even without a

Importantly though it's a good single factor. Passwords aren't good. 1. They get repeated. 2. They get phished. Even just as a single factor, even without a fingerprint reader, a yubikey is far superior to a password. Adding a biometric on top of that is wayyyy better than a password. Most of what MFA has done for us is actually just provide slightly better "A's". It's not the quantity that counts, it's the quality. Previously to reach a good quality we'd need multiple factors. We've reached a point now where we have standards for authentication that are strong, often "strong enough", even with a single factor. A password then becomes a bit of a bonus.