1
00:00:00,000 --> 00:00:05,000
MFA is on.
Are all methods equal?

2
00:00:05,000 --> 00:00:10,000
Codes can be phished
and relayed.

3
00:00:10,000 --> 00:00:15,000
FIDO/WebAuthn credentials
are scoped to a site’s domain.

4
00:00:15,000 --> 00:00:20,000
Prefer phishing-resistant methods
where supported.

5
00:00:20,000 --> 00:00:25,000
Check fallback sign-ins and recovery.
Phishing resistance has limits.