Strategies for Better MFA
summary
USAA uses a three-part MFA strategy: default on strong by enrolling new accounts immediately into MFA so new enrollments show high adoption; authenticator of choice across channels (mobile biometrics, WebAuthn, push, SMS as fallback) to prioritize cross-channel options; and passive enrollment plus behind‑the‑scenes tokens and certificates for a quick‑logon experience that works but needs an interstitial to communicate security. Recovery flows are held to the same proofing standard as initial enrollment to avoid weaker attack vectors.
AI-written summary · about
chapters (8)
- 0:00Introduction to MFA strategies
- 2:34Defaulting to strong MFA
- 7:06Authenticators of choice
- 9:51Passive authentication options
- 12:39Mobile authenticator priorities
- 14:28Building the authentication ecosystem
- 17:57Summary and key takeaways
- 21:50Q&A session
related talks
38mAnatomy of the Attack: The Rise and Fall of MFA
17mImplementing Multi-factor Authentication
34mWhat does ”MFA” mean?
45mMFA: Stories that make you go 'Huh?'
50mOne Does Not Simply Add MFA
20mBuilding a Resilient MFA Framework: Strategies and Best Practices
40mPurple Team Auth: Hacking & Bypassing MFA Systems, and How to Armor Up
13m"As soon as it's a risk, I want to require MFA": How Administrators Configure...