← Back to context

Comment by jascha_eng

3 days ago

Isn't the whole point of 2fa that if someone gets access to my computer they can't do shit because they'd need my phone too?

The “whole point” of 2fa is that even if someone knows your password they cannot login with just credentials.

Compromising or stealing a device is a significant escalation from guessing passwords.