Would a password with multi factor authentication be more secure than biometrics? I am asking due to the fact that if biometric data gets compromised, there is no way to change it, and in data breaches in the past , millions of sets of fingerprints were compromised. In 2014, HD pictures were used to gain access to a German government facility. Given that technology will increase, and so will the abilities to spoof biometric features, how are these better than a password + biometrics or another form of multi factor authentication? Biometric data is constantly readily available for an attacker to try to spoof, even without interacting with you. Also, an attacker could presumably force someone to open a device using their biometric data, against their will. With all these considered, it appears to me that the push to get rid of passwords is not the best for security.
8
-
It depends entirely on your threat model and where your vulnerabilities are.– schroeder ♦Jul 24, 2019 at 15:48
-
Who is wanting to replace all passwords with static biometrics (fingerprints, face, eye, etc. )? I am unaware of anyone wanting to do this.– schroeder ♦Jul 24, 2019 at 15:49
-
@schroeder Just one example, on top of every new phone advertising biometrics as a complete replacement of passwords microsoft.com/en-us/security/technology/…– john doeJul 24, 2019 at 15:50
-
I think you misunderstood what MS is offering. They are not replacing all passwords with biometrics.– schroeder ♦Jul 24, 2019 at 15:51
-
I just read the paper. Biometrics is just one factor.– schroeder ♦Jul 24, 2019 at 15:54
|
Show 3 more comments