2 ms·
My work just replaced our VPN app (which required a password) with something that they excitedly promised would provide us "passwordless login!" Lo and behold,
by BeetleB 3y ago
My work just replaced our VPN app (which required a password) with something that they excitedly promised would provide us "passwordless login!"
Lo and behold, it uses 2FA. Periodically I have to go get my phone[1] just to do my work. Way more friction than typing in the password.
[1] No, I don't keep my phone on me all the time. It usually just sits in some random room at home.
- arwineap 3y agoThey are managing their liabilities, as is standard industry practice. I'm surprised your workplace did not have 2fa until now
- BeetleB 3y agoNot arguing that 2FA isn't more secure. But don't promise a smoother driving experience by removing speed bumps and replacing them with stop signs.
- nsxwolf 3y agoOur VPN login used to be type your password, then accept the push notification from Duo. Now we decided push is insecure, so you now have to type "<your password>,<Pin from Duo>" as your password. The starred-out password field plus my blank keycaps are a real test of my touch-typing ability.