0:26:37
Add Multi-Factor Authentication (MFA) to Django in Mere Minutes
DjangoCon Europe 2022 · October 14, 2022
Justin Mayer argues that SMS and email-based MFA are weak choices: they create privacy and reliability problems, encourage code sharing, and can still amount to single-factor authentication when an email account can reset the password. He recommends device- and app-independent TOTP and WebAuthn, noting that…