2 ms·
So we are at a point where just a strong password stored in memory is actually the safest option (given brute force protection)?
by ikekkdcjkfke 1y ago
So we are at a point where just a strong password stored in memory is actually the safest option (given brute force protection)?
- modeless 1y agoThe safest option is a hardware security key because it is not vulnerable to phishing. And I expect Google to trust it above all other forms of authentication because of that. So anyone who is worried about losing access to their account should immediately buy multiple hardware security keys. You don't have to buy them from Google.
- reaperducer 1y agoSo we are at a point where just a strong password stored in memory is actually the safest option (given brute force protection)? The safest option is straight out of 1994: Sticky notes. Security keys can get lost or stolen. If someone breaks into your house or office, they're going after something other than a sticky note in your desk.
- modeless 1y agoPasswords on sticky notes can be phished. They can also be lost or stolen. The advantage of security keys is that phishing doesn't work on them. Phishing is a lot more likely for the vast majority of people than a thief both stealing their security key and knowing what to do with it.