3 ms·
FIDO can and does get used as the only factor auth when people/orgs go passwordless. There are various ways of recovering and having temporary access when losin
by _8j50 4y ago
FIDO can and does get used as the only factor auth when people/orgs go passwordless. There are various ways of recovering and having temporary access when losing a key
- fmajid 4y agoI'm less concerned about loss of access than with what happens if your key is stolen and can be used to log in because no password is required. Just pressing a button is not strong enough. Now, Apple/Google/Microsoft implementing Passkeys with proper device authentication is perfectly fine. Perhaps I should have specified "FIDO U2F" rather than just "FIDO".