If you're using a hardware token to replace passwords, you're doing 2FA wrong
this post was submitted on 16 Oct 2024
272 points (86.4% liked)
Technology
61632 readers
4206 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
Dunno, we rolled it out without issue. But of course they also had keepass. You want password AND (TOTP token or hardware token)
With a password manager I'd argue its better but supports still not all there yet. I am waiting on bitwarden right now to support mull, basically its blacklisted, but it was added in the last 2 weeks so now its a waiting game.
Passkeys aren't a full replacement in my opinion, which is what DHH gets wrong. It's a secure, user-friendly alternative to password+MFA. If the device doesn't have a passkey set up you revert to password+MFA.
load more comments
(1 replies)
I'm sorry but I seriously do not see any benefits to using passkeys.
I use 24 character passwords in Bitwarden with 2fa on all accounts, how is a passkey better than that?
I'm a fan oh having a little usb key on your keychain, that has a fingerprint scanner