Of Two Minds about Two-Factor: Understanding Everyday FIDO U2F Usability
summary
Two studies test real-world FIDO U2F use: a 15-person lab comparison of three keys (e-pass, secure click, Yubikey) versus SMS OTPs, and a 15-person diary with 643 use entries (about 38 entries per participant). Findings: SMS scores higher on perceived usability despite longer login times; only 28% of security-key account accesses involve an actual button press; interoperability, unclear on-screen prompts, small button discovery, and default “remember me”/SMS fallbacks nudge users away from regular key use.
AI-written summary · about
chapters (12)
- 0:00Intro
- 0:20TwoFactor Authentication
- 2:05Security Keys
- 4:03Barriers to Adoption
- 6:44LabBased Study
- 7:48Comparing Methods
- 8:29Interoperability
- 12:10Participants
- 13:07Results
- 14:11Summary
- 16:07Emerging Issues
- 18:10Questions
related talks
05m“You still use the password after all” – Exploring FIDO2 Security Keys in a Small
24mStreaming Authentication
30mHow FIDO U2F Security Keys Work
05mUser Perceptions of the Usability and Security of Smartphones as FIDO2 Roaming
17m2FA in 2020 & Beyond
17mModern Authentication, Real life stories
12mTangible 2FA – An In-the-Wild Investigation of User-Defined Tangibles for Two-Factor...
24m2FA in 2020 and Beyond