News for hackers. Stuff that matters.
Re:Ask HN: Why is WebAuthn so slow to take off? by crote on Monday April 24, 2023 @05:57AM (#35685556)
I'm not sure about "most people", but I for one never stored 2FA tokens on the same device as my passwords. My password manager is only on my desktop/laptop, and my 2FA tokens only live on my smartphone/Yubikey.

Storing both on one device sounds like a pretty stupid thing to do. Sure, it's convenient, but you are putting a looooot of trust into the assumption that your single device will never be compromised.

Re:Ask HN: Why is WebAuthn so slow to take off? by runarberg on Monday April 24, 2023 @10:01AM (#35687760)
How do you enter a password on your phone than? Do you manually type them after you reveal them on your desktop machine?