Designing Consumer Account Recovery in a 2FA World

Explore the challenges and solutions for consumer account recovery in a two-factor authentication (2FA) environment through this conference talk from BSidesSF 2023. Delve into the complexities of maintaining security while accommodating user needs when devices are lost or upgraded. Learn strategies for implementing effective account recovery processes that minimize the risk of account takeover and reduce support overhead. Gain insights into balancing the robustness of WebAuthn with the practicalities of human behavior and technological changes. Discover best practices for designing user-friendly recovery mechanisms that maintain the integrity of 2FA systems.