Phishing resistance first
Phishing-resistant authentication is the current baseline for secure authentication, which means FIDO/WebAuthn, FastPass, PIV/CAC, etc. This post will focus on how those already meeting this baseline can take security to the next level.
Passwords, SMS, push notifications, and one-time codes are vulnerable to much less…