Click This, Not That: Extending Web Authentication with Deception
Timothy Barron, Johnny C.F. So, Nick Nikiforakis · 2021
With phishing attacks, password breaches, and brute-force login attacks presenting constant threats, it is clear that passwords alone are inadequate for protecting the web applications entrusted with our personal data. Instead, web applications should practice defense in depth and give users multiple ways to secure their accounts.