4 ms·
Ironically, just about the only sites where it makes sense to do this as a user are... those from the financial industry, who in their infinite wisdom frequentl
by ndriscoll 2y ago
Ironically, just about the only sites where it makes sense to do this as a user are... those from the financial industry, who in their infinite wisdom frequently decide to prevent autofill. There's otherwise basically no reason to ever open the password manager or to know any of your passwords.
In any case, if you have a KBA recovery mechanism, then anyone who would go dig through their saved passwords to put into a phishing site will also just enter the recovery info into a phishing site and enroll an attacker's passkey.
- sandos 2y agoFinance sites using passwords feels... so off. I do use Kraken somewhat, and they have a passwors still, but also use an authentication app. In Sweden no bank has used passwords online.. ever I think? It has always been 2-factor of some kind.
- portaouflop 2y agoWhat was the first factor ? For me it was always some kind of PIN - and then they built their own proprietary second factors which is also a bit insane imo