3 ms·
This happens because people won’t use a password manager and insist that “monkey123” is their super-secret unguessable password. The solution is to force them t
by teeray 3y ago
This happens because people won’t use a password manager and insist that “monkey123” is their super-secret unguessable password. The solution is to force them to use some kind of credential store (SMS 2FA, passkeys), because they can’t be entrusted to just hit the “generate secure password & save” prompt in the browser.
- hypeatei 3y ago2FA is more than defending against bad passwords but also compromised passwords (e.g. you accidentally share it in a public forum) and phishing attacks. It's very unlikely a bad actor has access to both factors.