Gone Phishing: Airbnb’s journey to phishing resistant MFA

It seems like with every passing day there is another data breach in the news. With password lists being readily available on the dark web, it is often only your Multi-factor Authentication tool that is standing in between a bad actor and your data. Unfortunately, many MFA methods are trivial to phish.
This is the story of how Airbnb transitioned from traditional MFA methods to modern, phishing resistant security keys for all of their employees, contractors and external partners. Graham look's at their motivations, what the considerations were when planning the migration for various types of users, and most importantly how they got buy-in from the entire company, from executive level down

[@ThomasB_NL]

Great story, thank you for sharing!

[@dubprocesslbc]

Nerds are real people too