Casey Reeves (it/its)Here's a guide on how to implement 2FA that paypal followed along nicely:
First step: enforce the use of an authenticater app as a backup method, with no other way around it.
Step 2: allow the user to then add *only* ONE physical security key, because who'd need two of them anyway? One of the fundamental ideas behind having physical security tokens is to have at minimum two of them in the first place, but never you mind.
step 3: confirm that the key has been added to the user's account, get rid of the add security device button
step 4: tell the user they can now log in with their security key.
The result? You're using a security key that's not registered with this website.
Log in with your authenticater app or passkey, because why not use that instead? Go into settings and confirm that your security key is actually present and that paypal just decided to be a complete idiot.
Ole Jäger🔒 Erhöhe deine Online-Sicherheit mit der Zwei-Faktor-Authentifizierung! Sie fügt eine zusätzliche Sicherheitsebene zu deinen Passwörtern hinzu, indem sie etwas verwendet, das du kennst und das du hast. 📱 Aktiviere es jetzt und sei sicherer im Netz! 🌐 #CyberSecurity #TwoFactorAuth #OnlineSicherheit
🐦🔥nemo™🐦⬛ 🇺🇦🍉🔒 Secure your online accounts with SoloKeys! 🔑
Open-source security keys built with Trussed®.
Works with Google, Facebook, Twitter & more.
Get yours now:
🪬🍄🌈🎮💻🚲🥓🎃💀🏴🛻♓🧿Where do you keep your two-factor auth backup codes?
text file on a physical device (usb stick)
text file backed up to the cloud (google keep)
piece of paper (sticky note)
I don't (yolo)
Poll ended at .
The funniest part is that no matter how many security factors we use to replace passwords (two factor auth, passkeys, security keys, etc) there's always a backup that's just another password.
#twoFactorAuth #2fa #password #auth #authentication #security #passkeys #webauthn #fido2 #passkey #passwords
Serious MimaWhy does #Sharkey / #Misskey need an "authenticator app" registered before you can use a hardware key? That doesn't make sense #security wise.
Yeah I know it's to prevent people from just accidentally getting locked out of their accounts, but there should be an option for #FediAdmins to allow this risk. 🤔
#2FA #yubikey #hardwarekey #cybersecurity #twofactor #twofactorauth #twofactorauthentication
Yeah I know it's to prevent people from just accidentally getting locked out of their accounts, but there should be an option for #FediAdmins to allow this risk. 🤔
#2FA #yubikey #hardwarekey #cybersecurity #twofactor #twofactorauth #twofactorauthentication
Malte Bublitz 
https://lego.com unterstützt jetzt einen Code via E-Mail als zweiten Faktor für die Authentifizierung 👍🏼
Ronan
RastalSMS should only ever be used for 2FA if no better option exists. Authentication apps and hardware security keys are considerably better options.
olekstomekCheck out this awesome two-factor authentication app from 2FAS: https://2fas.com
#opensource #2fa #2fas #twofactorauthentication #twofactorauth #security
#opensource #2fa #2fas #twofactorauthentication #twofactorauth #security
