AWS account holders can now use FIDO2 passkeys as an authentication method.
You must log in or # to comment.
tbh this might be a good thing (not talking about amazon)
- as it normalizes MFA/2FA/TOTP
- which would help increase adoption
- and therefore it would increase users’ security hygiene
- which would help increase adoption
- as it normalizes MFA/2FA/TOTP
It says in the article that this won’t apply to org member accounts yet, but I wonder how it’ll work eventually. Member accounts created via account factory don’t even have a password, so you have to go through email account recovery to set one and then set up MFA. If this only applies to root users with passwords, that’s fine, otherwise I hope account factory will get a way to set up PW/MFA on a generated root user.
