Google Says Sorry After Passwords Vanish For 15 Million Windows Users
www.forbes.com
Google’s Chrome password manager makes security easier. Until a bug makes your passwords disappear, that is. Here’s what you need to know.
  • dan@upvote.auEnglish
    1·
    4 months ago

    The most secure practice for any high-value accounts (email etc) is to use WebAuthn with a hardware key like a Yubikey.

    TOTP is still vulnerable to phishing (a fake login page can ask for both a password and a TOTP code) so business/corporate environments are moving away from them.

    • AlleroEnglish
      1·
      4 months ago

      Sure, hardware keys are superior!

      I’m only talking about best practtices when using TOTPs in particular.