3 ms·
I would disagree that two-factor is easier. I already do all of the above by (1) using gmail, and (2) only logging in on my own devices. I also check my email
by bo1024 15y ago
I would disagree that two-factor is easier. I already do all of the above by (1) using gmail, and (2) only logging in on my own devices.
I also check my email so frequently that two-factor authorization would be a significant inefficiency, so there is certainly a cost-benefit tradeoff there.
- jrockway 15y agoYou only have to authenticate a device every 30 days. The attack that is prevented here is someone who knows your password getting access to your account. They can't get access unless they know your password and manage to steal your OTP generator or device. That's significantly harder than knowing someone's password. (Knowing your password is probably hard, but I know many peoples' password. It's "password".)