Could we replace traditional passwords with One Time Passwords?
We should start switching from 6 digits to many more, 10 at least or 16.
TOTP and lookup secrets as first factor authentication
https://github.com/ory/kratos/issues/2979
Could we replace traditional passwords with One Time Passwords?
We should start switching from 6 digits to many more, 10 at least or 16.
TOTP and lookup secrets as first factor authentication
https://github.com/ory/kratos/issues/2979
@eapl.me@eapl.me I’m not convinced you could to be honest. I think the possibility of stealing your OTP keys is quite high in that case, and would become the target of attack.