The threat surface of a password based system is like Lake Superior.
The threat surface of a passkey based solution is like a small puddle after a rain.
How is there a "reduction" in security here?
The threat surface of a passkey based solution is like a small puddle after a rain.
How is there a "reduction" in security here?
I'm not a yubikey expert, but I don't believe that losing your Yubikey will open up your company to a breach.
For a typical passwordless solution, losing your phone isn't a risk, given that no one can reproduce your face or thumbprint.