3 ms·
Off topic: is it secure to replace password with 2FA altogether? If not, what about some kind of 2FA variant?
by est 4y ago
Off topic: is it secure to replace password with 2FA altogether? If not, what about some kind of 2FA variant?
- raspyberr 4y ago2FA isn't some app. It's an idea. That multiple and different forms of authentication increase security. You can't just get rid of one of the factors. You at least have to replace it with another form. So yeah you can have password + totp, but if you get rid of password then you just have single factor and have lowered your security.
- dns_snek 4y agoThis doesn't exactly answer your first question, but WebAuthn exists as part of the FIDO2 framework. One of the authentication modes it provides is passwordless authentication where all you need to log in is your hardware token like YubiKey or platform token like Apple/Google Passkeys. https://www.yubico.com/authentication-standards/fido2/ https://www.yubico.com/authentication-standards/fido2/ https://webauthn.guide/ https://webauthn.guide/