Hacker News new | ask | show | jobs
by goatsi 396 days ago
TOTP and SMS 2FA prevent credential stuffing attacks, which is very valuable considering how bad people are with password reuse and how many breaches with plaintext or weakly hashed passwords there have been.
1 comments

Yes, but other authentication factors also prevent credential stuffing, as well as phishing, which is probably the most important problem in authentication.