Hacker News new | ask | show | jobs
by whatyesaid 1116 days ago
I think passkeys + 2FA is enough. Just enforce 2FA for any important service and it will be fine, if you don't force it then people who aren't as tech savvy will not do it or people may forget.

For anything non-important I actually use sign in with Google, so.