DEV Community

Discussion on: Adding multi-factor authentication to your app, the easy way

Collapse
 
lakatos88 profile image
Alex Lakatos 🥑

Thanks! That's a very good question. It fails with password managers, and I think that's what I expect it to do. It's supposed to be a biometric authentication factor, so it shouldn't work without you, right? I would think it bad if my phone unlocked for a picture of my face instead of my face.

I see biometrics for MFA kind of the same way. Ideally, you'd disable password managers. A long and random password would be less secure than a memorable password typed by the right individual, in my opinion.