4 ms·
I use the yubikeys - they seem pretty good and never had a problem unless computer was hard to plug into. I also use google authenticator which is TOTP. Never
by tempnow987 5y ago
I use the yubikeys - they seem pretty good and never had a problem unless computer was hard to plug into.
I also use google authenticator which is TOTP. Never had a problem there either.
I will say that I like the google login flow. MFA is only needed ONCE every 30 days per device. That's the right tradeoff. A business bank I deal with is MFA on every login (with an org login then an employee login) AND MFA on various transactions. That really is instant MFA fatigue! I'm certain no one is even matching up things anymore (it'll do the MFA to approve "1 transaction" with no details on trx). They do have a phone call method, but same issue, press X to approve "2 transactions".
- BrandoElFollito 5y ago> AND MFA on various transactions This is actually reasonable. there are some transactions that require re-authentication to make sure you are the person behind the screen. This is in swift contrast with question from finance dept such as "how long of a screen timeout is secure?". To what I respond "about 10 seconds - the time you need to walk to the door". This is "not acceptable" - to which the answer is re-authentication but his requires them to actually think about what is important and recode the app.
- sebazzz 5y agoAlso for Microsoft accounts? When I want to use my Yubikey for my Microsoft Account, it requires me to protect the key using a PIN. But when I protect it with a PIN, I can't use it anymore via NFC on iOS.
- tempnow987 5y agoNo, not for MS accounts unfortunately. They also steer users towards their authenticator. Fine if you have one account, but in a business users are on a lot of platforms. The pin vs password / windows hello stuff on windows is also sometimes annoying / broken.