Email or username:

Password:

Forgot your password?
Top-level
Chris

@shortridge I would prefer webauthn/passkey with yubikey. You'll need a backup token anyway, so just tell your person how to use it. (actually get them yubikeys for their own accounts, too)

5 comments
Kelly Shortridge

@cy you are vastly overestimating the usability of yubikeys for non technical people, especially the elderly.

many elderly people no longer even have fingerprints, too

Chris

@shortridge it is "plug into USB, press button when prompted", how is this more complicated than typing a code from an SMS? And you don't need fingerprint for it

silvio

@cy @shortridge

This is so far from the truth for non-tech savvy people.

For me it's ok if my mum builds passwords from the first letters of long sentences like I explained to her 10 years ago, she can cope with that, I won't explain new ways of managing pwds to her every 2 years because that only makes her insecure and then she just takes insecure pwds

the cake is offline

@cy @shortridge bro, I have worked in tech for 30 years and Yubikeys are still largely unusable to me. Because in order to use them you need to A) know where they are, B) have a device with the right port and software, C) have everything configured, and D) have *physical access* to the relevant port, while also seeing the relevant screen.

As a disabled person with severe ADHD, chronic pain, and other health problems, coordinating all those variable for every logging is fucking impossible.

Chris

@cakeisnotalie @shortridge
i understand your concern. haven't thought from that angle, thanks for sharing.. however i do think your points get worse for other MFA types, no? maybe backup keys would be sufficient next to the password. or backup webauthn private key in the backup password manage..

still unusable for non-techies. MAYBE one should include a techie-friend into the last-resort recovery plan for your non-techie person

Go Up