I know this world runs on money, but like... c'mon man, I just wanna ask a few simple questions...

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 9 months ago (6 children)

Fuck passwords, use proper MFA.

Phishing training is good though.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 8 points 9 months ago (5 children)

    I have yet to encounter mfa where not one of the factors is a password.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 3 points 9 months ago (4 children)

    Fingerprint with an RFID badge is MFA with no passwords.

    Something you have and something you are is the most expensive MFA combination, which is why it isn't common.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 9 months ago (3 children)

    Fingerprint + Authenticator as well.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 9 months ago (2 children)

    If its an authenticator app, then its password based, as ultimately the password or pin is needed to unlock the phone.

    If its a standalone authenticator device, then yes thats MFA. But like I said, its the most expensive option since you would have to purchase devices.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 9 months ago (1 child)

    My authenticator app requires my fingerprint, which is biometric, so fingerprint plus device for the MFA.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 9 months ago

    If its an Android or iOS phone, then it will prompt for a password or pin after a few failed fingerprint scans.

    Fingerprint is just there for convenience, but you can get around it in most cases.

  • source
  • parent