10 ms·
These messages are correct. You need 2FA. Passwords alone are not good enough security. It doesn't have to be via your phone if you don't want it to be. You ca
by rjmunro 3y ago
These messages are correct. You need 2FA. Passwords alone are not good enough security.
It doesn't have to be via your phone if you don't want it to be. You can buy a YubiKey or similar, or use something like https://github.com/simnalamburt/macos-totp-cli https://github.com/simnalamburt/macos-totp-cli (I haven't tried it, just the first thing I found in a google search).
- martin_a 3y ago> Passwords alone are not good enough security. This made me think for a moment. Why not, though? My password manager generates random passwords with numbers, special characters and whatnot with a length of 24 characters. Even I don't know most of my passwords at this point, so what's the problem with (secure) passwords? Poor application security? That's not really my problem, is it? edit: to add this. I know that "test123" would be a problem, but my secure passwords can not be guessed by anybody or really be bruteforced. so, what does 2FA really protect me from in those cases?
- christofosho 3y agoIf someone does happen upon your password, they probably won't also have your 2fa. That's how I view it. Safety in layers.
- yreg 3y agoI think they probably will have my 2fa, because then they've probably pwned my computer.
- bArray 3y ago> You need 2FA. I don't trust Microsoft with my phone, and I don't want logging into my account to become a pain where I need a key. I'll just take my code elsewhere. > Passwords alone are not good enough security. Security will only ever be as good as the weakest part - and I happen to find phones pretty weak.