[classified]

> The meaningful defense is to foreclose on it entirely

Sounds easy enough in theory. How do you do that in practice?

[9dev]

Use passkeys. Bully services that don’t offer them or lock them behind enterprise plans into implementing them.

That’s it. The single working Defense against credential theft.