as a developer it is incredibly frustrating and time consuming
Huh? How? Implementing OTP (which I’m assuming most people here are talking about) is pretty trivial, and once you have it set up, it doesn’t require much maintenance.
It fails for somebody every day, it adds a dependency for a known unreliable 3rd party that often mangles the identification data it sends back, it is exploited by that 3rd party for extending their monopoly, and it gives that 3rd party (or any hacker that got access to them) full access to impersonate any user it wants.
That’s the user’s choice, that should not be a consideration when choosing authentication methods as long as you tell them how to store it properly (in a reasonable way, probably shouldn’t mention keepass or anything like that).
As a user its annoying, as a developer it is incredibly frustrating and time consuming.
Huh? How? Implementing OTP (which I’m assuming most people here are talking about) is pretty trivial, and once you have it set up, it doesn’t require much maintenance.
It fails for somebody every day, it adds a dependency for a known unreliable 3rd party that often mangles the identification data it sends back, it is exploited by that 3rd party for extending their monopoly, and it gives that 3rd party (or any hacker that got access to them) full access to impersonate any user it wants.
What?
Implement TOTP and let your users use their preferred authenticator and none of what you’re struggling with will apply.
Oh, yeah, and of course there’s someone on the internet talking about the MFA protocol that no corporation uses.
That one is obligatory too.
(Anyway, yes, if you need MFA, use TOTP. That’s a non-brainier. Except that corporations don’t have brains.)
Which also means you can just copy/paste it alongside username and password with the same manager.
That’s the user’s choice, that should not be a consideration when choosing authentication methods as long as you tell them how to store it properly (in a reasonable way, probably shouldn’t mention keepass or anything like that).
👆️