Beep boop - this is a robot. A new show has been posted to TWiT…
What are your thoughts about today’s show? We’d love to hear from you!
Beep boop - this is a robot. A new show has been posted to TWiT…
What are your thoughts about today’s show? We’d love to hear from you!
Please realize that not everyone can or wants to have their phone with them every time they want to login to a website. When I hear Paul say that it’s so easy to just pick up your phone to handle the 2FA for a login, it irritates me because I spend most of my day without my phone anywhere near me. And no, I can’t use a Yubikey because I can’t connect personal devices to my work computer. Now that BitWarden offers the option to use it for 2FA codes, I can finally enable 2FA on more logins. However, there are still some sites that require a dedicated app or only support certain authenticators so I have limited access to those sites. Also, when I’m home and sitting at my computer in the den, I don’t keep my phone within arms reach at all times so it’s not always handy.
For work machines, your employer should be providing the Yubikey or equivalent, or an authenticator app on the work smartphone or a company password manager…
For work accounts, they do provide a 2FA token, but that is only for my work accounts, not for my personal accounts.
Okay. We aren’t allowed to use private services on company devices and vice versa.
I have a customer that isn’t looking forward to the day when he has to use MFA internally. They don’t allow cell phones due to the nature of their business, so he would need to get hardware tokens for everyone. He is hoping the number pad at the door is sufficient enough.