Implementing Multi-factor Authentication
summary
MFA choices hinge on concrete trade-offs: adopt out-of-band SMS for broad public audiences because most users have phones, use TOTP soft tokens (Google Authenticator) for higher assurance with low cost, and require YubiKey / U2F hardware tokens for internal SSH and deployment access; prompt for possession on sensitive actions, log and analyze IP/location/user agent for behavioral re‑auth, provide downloadable backup codes but never allow support to disable MFA via social engineering; expect token units to cost ~$20–60 each.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 1:26Multifactor Authentication
- 3:26Types of Multifactor Authentication
- 5:23User Experience
- 8:30Implementation
- 10:47Dealing with lost tokens
