Sort authentication methods by phishing resistance

Sort each method by phishing resistance. High phishing resistance Some protection but still transferable Low protection or no extra factor Passkey on a trusted device Hardware security key using the real site origin Authenticator-app code SMS verification code Email one-time code sent to the same inbox the attacker wants Password only Push prompt approved without checking device and location details carefully Transferable Improved Origin-bound

Sign up free — one personalized lesson every day, matched to your role and goals.

Already have an account? Sign in