Skip to content

Commit

Permalink
Proofread headers
Browse files Browse the repository at this point in the history
  • Loading branch information
bethh0rn committed Feb 28, 2025
1 parent f5312cd commit a3892c4
Showing 1 changed file with 3 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -133,21 +133,21 @@ Let's consider how these three methods — passkeys, magic links, and MFA — so
2. Forgetfulness, Reuse, Guessable, Breaches, Sharing
3. Theft, Lockout

### The Benefits Of Passkeys
### Passkey Benefits

Passkeys are highly convenient, requiring almost no effort from the user, and since private keys never leave the device unencrypted, they solve the second group of problems too. However, if a user has Google and Apple devices (a phone and tablet), passkeys will not be shared.

Passkeys are still vulnerable to theft and lockout. Users remain vulnerable to having their master passwords stolen, physical theft of devices, keylogging, and having their faces faked; they can still experience lockout if they lose access to a master password or device.

### The Benefits Of Magic links
### Magic Link Benefits

Magic links are convenient and solve the second group of problems as long as the user uses a secure email provider and doesn't share their email account with anyone.

Theft and lockout are difficult to prevent. A user's email account suffers all the vulnerabilities of a password, and if stolen, allows an attacker to log in to any website that uses magic links. If a user loses access to their email account, they lose access to all magic-link websites.

Passkeys and magic links have almost identical advantages, but passkeys are slightly more convenient. With magic links, users experience delays between requesting a login and receiving the email. There is also a chance that the website's email provider could go down or the user's email client could reject the email as spam.

### The Benefits Of MFA
### MFA Benefits

MFA is more inconvenient than using only a password, but generally solves all the problems in the second group except forgetfulness. Once again, theft and lockout are not solved by this method.

Expand Down

0 comments on commit a3892c4

Please sign in to comment.