-6
Why don't phones support 2FA? (kbin.social)
submitted 2 years ago* (last edited 2 years ago) by to c/asklemmy@lemmy.world
15 comments fedilink hide all child comments
 

Phones could allow much higher security if they supported 2 factor authentication. This could be face/fingerprint along with a typed or swiped password. This seems like a simple solution that leverages software that is already implemented. Just make it an added option in addition to the existing one

ETA: Sorry for the duplicate posts, I was getting error messages. Pls use this one.

I am surprised there is confusion about what 2fa is. Here is a simple definition: https://www.microsoft.com/en-us/security/business/security-101/what-is-two-factor-authentication-2fa

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 2 points 2 years ago (1 child)

You are correct. I was thinking about how to set a passphrase on my phone.

In a scenario where one is unconscious, fingerprint or facial recognition are poor protection. Add a passphrase or swipe to a physical identity methods and you are protected.

Not certain, but I think this also could help protect from virtual attacks because even if they get your passphrase they also need a physical identity method.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 2 years ago (1 child)

    Now that I think about it, there is a problem: fingerprint & face ID are not 100% correct all the time, so they'd rather have false negatives than false positives, i.e. they'd rather deny access to someone who is authorized, rather than grant access to someone who is not. This is normally not a problem, cause if for whatever reason the biometric method doesn't work (e.g. wet fingers, wearing gloves, wearing full face mask, etc) then you always have the PIN/passphrase ... but with your 2FA idea this wouldn't work anymore.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] [S] 1 point 2 years ago

    That's interesting. I have never really used the biometric keys so I'm not familiar with that.

    So set up another backup password for situations where biometric keys fail. Then the 2 passes that you type unlock the phone.

  • permalink
  • fedilink
  • source
  • parent