3 ms·
I'd say passwords are nice as a second factor. They're terrible as a first factor, but as an optional addon memorized secrets do improve security. The obvious
by SAI_Peregrinus 4y ago
I'd say passwords are nice as a second factor. They're terrible as a first factor, but as an optional addon memorized secrets do improve security.
The obvious problem is that we treat "something you have" items like Yubikeys, phones (webauthn), TOTP tokens, and fingers (biometrics) as second factors instead of as the primary factor.
- tialaramex 4y agoWebAuthn, and FIDO underlying it are both happy to provide both factors. A good smartphone is itself "something you have" and is capable of verifying either "something you are" via local biometrics or "something you know" in the form of a password.