Silent short / 25 seconds
MFA methods offer different protection.
Silent 25-second LEGO comparison. One visitor faces two closed sign-in doorways. Precise overlays distinguish code phishing and relay from FIDO/WebAuthn domain scoping, then highlight fallback sign-in and recovery paths. The scene is a metaphor, not an access-granted result. Transcript and SRT supplied.
The teaching words are burned in. The transcript and optional SRT provide additional accessibility support.
Read the teaching text
MFA is on.
Are all methods equal?
Codes can be phished
and relayed.
FIDO/WebAuthn credentials
are scoped to a site’s domain.
Prefer phishing-resistant methods
where supported.
Check fallback sign-ins and recovery.
Phishing resistance has limits.
Sources and limits
Phishing resistance does not mean immunity to every compromise. Review fallback sign-in and recovery too.