How passwords and logins work: why a website should not know your password
Two-factor authentication: what a password alone cannot prove
A password only proves that someone knows it. A thief can know it, after a leak or after watching you type. A code from your phone changes what a stolen password is worth.
-
1
Miva adds an option to the gym's website: two-factor authentication. You turn it on, and the website shows you a square of black dots, a QR code. You scan it once with an authenticator app on your phone.
-
2
From then on, the app shows six digits that change every 30 seconds, even with the phone offline. Strangely, the gym's website always knows which six digits your phone shows.
The rest of this episode is for subscribers
Subscribe to read every premium episode. You can cancel when you want.
Paid yearly: $99 instead of $119.88