AUTHENTICATION METHODS: CHOOSING THE RIGHT TYPE

Summary from the TLDR InfoSec newsletter

Password-based authentication is vulnerable to various common attacks, including password reuse, weak passwords, and phishing. To combat these threats, this guide from the NCSC guides on “going beyond passwords” with MFA, federated Single Sign-On (SSO), FIDO 2 security keys, or magic links and one-time passwords (OTPs). Each section includes an introduction to the method, its pros and cons, and a chart to help determine when you may want to use it and when you may want to consider a different method.