SESK: Stuff Everyone Should Know · sesk.info/passwords-mfa
Is a password enough?
Not even close. Add a second factor. Any one beats a password alone.
The Just Right card
Too littleOne password, used everywhere
Too muchLocked down tight with no backup codes
Just rightPassword manager, MFA everywhere, passkeys where you can
Huh, didn't know that: Text code: good. Email code: good. Authenticator app: better. Passkey: best.
Somebody tried to SIM swap my number. Joke's on them. All they got were calls about my car's extended warranty.
Sources
- Microsoft on MFA (2019)
- CISA mobile guidance (2024)
- Have I Been Pwned (2025)
More stuff everyone should know
That's stuff everyone should know.
