Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 2755

a multi factor authentication requires at least two sets of credentials. This is typically something you know (e. g. a password) and something you own (e. g. a token generator or mobile phone), but could also be something you are (a biometric).

3 votes

Two passwords provide better security than two-factor authentication?

What am I missing here? The threat model. The threat model of a sync-capable password manager is to fully trust the client and zero or minimal trust on the server. This is significantly differen …
Lie Ryan's user avatar
  • 31.6k
0 votes

Disable Office 365 2FA before period of leave without phone?

Don't bring work with you. Set an autoresponder to instruct anyone sending to your account to resend to another person that's taking over your affairs while you're on leave. Your Office 365 Admin can …
Lie Ryan's user avatar
  • 31.6k
3 votes

Staged Authentication

I've never heard of specific, generally accepted terminology for it, but it's an application of the principle of least privilege. I've seen applications that does this calls this by various terms: …
Lie Ryan's user avatar
  • 31.6k
2 votes

What's stronger: phone/text 2FA or authenticator app?

App-based 2FA is much stronger than SMS/Phone based 2FA. The reason being that 2FA code sent to SMS and phone call can be intercepted by your mobile phone network provider. By design, because phone nu …
Lie Ryan's user avatar
  • 31.6k
5 votes

Can 2FA keys be duplicated?

When you setup a new hardware token, you're usually presented with one of two options: you can either let the token generate a new key or you can program it with a key you generated outside the token. …
Lie Ryan's user avatar
  • 31.6k
53 votes

Is 2FA via mobile phone still a good idea when phones are the most exposed device?

Is 2FA via mobile the best security there is? No. SMS 2FA is the weakest form of 2FA, however, it's still worthwhile because it does improve security and it has a relatively low barrier of entry espec …
Lie Ryan's user avatar
  • 31.6k