3 ms·
By that metric, passwords are even less ready, as I seem to always have to field calls for passwords getting stolen or compromised or accounts getting phished.
by stavros 1y ago
By that metric, passwords are even less ready, as I seem to always have to field calls for passwords getting stolen or compromised or accounts getting phished. I guess we're back to faxing ID.
- rekabis 1y agoI have a non-technical father with dementia, and passwords+TOTP are almost frictionless for him, with minor exceptions. We are able to share around passwords and TOTP codes without any problems so I can properly monitor his online activities to keep him out of trouble. He’s a cranky old guy with almost zero trust, so having to input all that stuff satisfies him that security is being employed. Passcodes just freak him out.
- stavros 1y agoI think Github is basically the only good passkey implementation right now. The ideal flow should be: * Click login button * Window pops up asking you which passkey you want to use, you click the one you want * You're in Anything on top of that is just added friction, and I haven't seen many sites get it right.