Re:Passkeys: A Shattered Dream
by PaulHoule on Friday April 26, 2024 @07:15AM
(#40167956)
It always struck me that 2FA is a corporate suicide pact. Some percentage of users are going to lose their keys per year so your user base is going to decay like a radioactive element.
[ Parent
| on HN ]
That’s why most 2FA’s are 1.5FA by default where you can recover via SMS, delayed e-mail, etc, and you can (sometimes) only disable this by clicking through three scary screens and saving your 10 backup codes.