4 ms·
I have hated Push MFA since it was introduced. How hard is it to just type a code really. In the end to fight against push bombing you end up with push notific
by prmoustache 3y ago
I have hated Push MFA since it was introduced.
How hard is it to just type a code really. In the end to fight against push bombing you end up with push notification that ask you for a code anyway.
- deleted 3y ago[deleted]
- gruez 3y agoAt least on for icloud sign ins (not sure about password resets, too lazy to check), clicking "allow" doesn't allow the sign in, it only displays a 6 digit code that you have to enter to log in.
- antihero 3y agoYou can instead opt to use HSMs for your Apple ID MFA. I have 3x YubiKeys in various locations for this exact purpose. https://support.apple.com/en-gb/HT213154 https://support.apple.com/en-gb/HT213154
- gruez 3y agoThey mention "FIDO® Certified* security keys", this presumably means physical keys only, and not soft keys like the ones that keepassxc/bitwarden provides? If so that might be too much of a hassle for me. I care about my security, but I don't care enough to drop $100 on 3 separate security keys, and finding 3 separate places to keep them secure.
- hocuspocus 3y agoYou need two keys, not three. But yes I wish you could use one hardware key as backup and one software key for day-to-day usage, or at least the security key in a trusted device (up to you to have a circular dependency to your main device or not).
- someguydave 3y agoIt does not help you when a trusted device is stolen, the yubikeys can be disabled if they unlock your phone or device