> Do you know that major tech companies saw a near 100% reduction of successful phishing attacks after adding yubikeys? His point (my emphasis): > User picked

> Do you know that major tech companies saw a near 100% reduction of successful phishing attacks after adding yubikeys? His point (my emphasis): > User picked passwords (1FA) are and will always be the single best solution that has ever existed for authentication, _considering everything from security to usability and practicality, wholistically_ So his point is that if you consider all aspects wholistically, including usability and practicality, passwords are the best solution. I'm not saying I agree, but a 100% reduction of successful phishing attacks after introducing Yubikeys only considers security, and not the other factors.