mlevison, 4 months ago

@jsrailton not everything that matters supports real 2FA.

Even worse some apps offer 2FA with text message as a fallback

publicvoit, 4 months ago

@jsrailton Only FIDO2 and Passkeys are protecting against #phishing attacks.

Caution: #Passkeys might copy your secret into the service provider's cloud for convenience and backup purposes.

IMHO, #FIDO2 hardware tokens are the only non plus ultra for authentication security since they protect your secrets in hardware without the possibility of "backups" to the cloud.

#TOTP #2FA #U2F