3 ms·

That would be passkeys, supported by Apple, Google, Microsoft and others, here are webpages, that currently offer the option: https://passkeys.directory https:

• snarf21 4y ago
  While I'm totally in support of public/private keys, FIDO and the like, can we just not move to a different 1 factor? Security is always about layers. The whole point of a (good) 2FA is to be a secondary factor. How long before there is a zero day discovered that lets someone MITM a passkey on your mobile device?
  • jsmith45 4y ago
    Passkeys as implemented are normally multi-factor. You need to both posses a device whose platform authenticator contains a key registered with the site, and also enter either a PIN, or use biometrics. On mobile devices this is done via the same options available on the lock screen, while for Windows this is "Windows Hello". I'm not sure how MacOS works here, but presumably similar to iOS. As an alternative to using a platform authenticator a FIDO2 security token can be used over USB, bluetooth, or smart card NFC. It is up to the site to specify if user verification (i.e. a second factor) is required, or not. If required, the authenticator must verify the user, typically via biometrics or PIN, although a desktop OS may fall back to login password. The website may instead specify "preferred", which generally requires a second factor, but allows an authenticator to skip in in some circumstances (like if a classic password is the only verification option available, as opposed to a PIN or biometrics, since in that scenario requiring the user to type their computer login password every time is generally not a good user experience, and would be best reserved for extra sensitive scenarios).