Phones do. MFA via biometric is a thing and has been for quite some time.
Even apple face Id is a method of mfa
this post was submitted on 25 Feb 2024
-7 points (40.5% liked)
Ask Lemmy
26682 readers
3202 users here now
A Fediverse community for open-ended, thought provoking questions
Please don't post about US Politics.
Rules: (interactive)
1) Be nice and; have fun
Doxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them
2) All posts must end with a '?'
This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?
3) No spam
Please do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.
4) NSFW is okay, within reason
Just remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either !asklemmyafterdark@lemmy.world or !asklemmynsfw@lemmynsfw.com.
NSFW comments should be restricted to posts tagged [NSFW].
5) This is not a support community.
It is not a place for 'how do I?', type questions.
If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.
Reminder: The terms of service apply here too.
Partnered Communities:
Logo design credit goes to: tubbadu
founded 1 year ago
MODERATORS
?
I must be missing something. Facial recognition is 1 method. What is the second?
For convenience phones don't always ask for the pin code. That is the other method.
I don't think you understand 2FA.
2FA is using your password and your phone (for example) to get into an account.
If someone has your phone and your biometrics/password you're basically screwed.
It seems like a really unlikely sequence of events that would lead to this.
Do you have any sources talking about this happening?
OP is correct 2FA refers to authentication via 2 factors, e.g. digital and pin. Phones use only one, you can unblock them with either a digital or a password, that's LESS secure than 1FA and much less secure than 2FA.
The phone itself is not a factor, because every scenario starts with the attacker having access to the phone. If phones had 2FA someone would need to get your digital AND your password to access it, so a lot less likely to happen than having either of them.
The answer as to why that's not an option is this would be impractical and people wouldn't use it. But it would be definitely more secure than current system.
I think the confusion here is that I mean to use 2FA to access my phone, not websites or other hardware.
I think you're getting downvoted because many people don't understand exactly what you mean by 2FA, and especially, for what purpose.
You could try to clarify that, but let me see if I get this right: You'd like to use 2FA as a more secure way to access your phone, having the phone require 2 factors to unlock it; not as a way to use your phone as one of the "two factors" for some other 3rd party account, right?
Basically, you'd like a phone to support an authentication method requiring 2 factor to unlock the phone itself, for example both a PIN and fingerpring, or passphrase and face recognition, is that right? As in, one needs both factors, not one or the others. If so, yeah, I guess that could be pretty useful for the very security conscious among us.
You are correct. I was thinking about how to set a passphrase on my phone.
In a scenario where one is unconscious, fingerprint or facial recognition are poor protection. Add a passphrase or swipe to a physical identity methods and you are protected.
Not certain, but I think this also could help protect from virtual attacks because even if they get your passphrase they also need a physical identity method.
Now that I think about it, there is a problem: fingerprint & face ID are not 100% correct all the time, so they'd rather have false negatives than false positives, i.e. they'd rather deny access to someone who is authorized, rather than grant access to someone who is not. This is normally not a problem, cause if for whatever reason the biometric method doesn't work (e.g. wet fingers, wearing gloves, wearing full face mask, etc) then you always have the PIN/passphrase ... but with your 2FA idea this wouldn't work anymore.
That's interesting. I have never really used the biometric keys so I'm not familiar with that.
So set up another backup password for situations where biometric keys fail. Then the 2 passes that you type unlock the phone.
Google has their titan keys for this purpose. https://store.google.com/us/product/titan_security_key?hl=en-UK
Sorry for the downvotes dude, it‘s a very fair question i don‘t really have an answer for
-
Have device
-
Have passcode/fingerprint/face
Two factors