> Maybe your phone doesn't have banking and stuff on it
replyI don't know where you live, but where I am most banks insist on proprietary 2FA via their own app. Only (some of) the fintechs allow TOTP.
Yes you can get your codes via SMS, but I thnk we all know what a security mess SMS is. I would rather have the bank's proprietary app since at least everything will be going over HTTPS and also eliminates most of the vulnerabilities associated with SMS just by virtue of being an app.
Passkeys are the standardized version of the bank's proprietary app. Well, except for the device attestation part, that won't happen on iPhones.
replyI think you meant to say TOTP.
replyI get why TOTP is the better standard, but nothing uses that because the UX in most implementations was horrendous for like 8 years.
replyUSA, Chase lets me set a passkey
replydeleted
replyIf your phone does not have any important or sensitive on it, why even secure it?
reply> If your phone does not have any important or sensitive on it, why even secure it?
replyOr why have a smartphone in the first place if you're not going to put any sort of meaningful apps on it. ;)
My iPhone passcode was either unset or 2222 until like 2018. At times it was jailbroken af. It had messaging and stuff. Wouldn't have been the end of the world if someone hacked it, and nobody did.
reply