What’s on the MFA & Passkeys poster
A 6-row table: Method · Phishable? · Note.
Ordered by resistance to a determined attacker.
- Passkey / FIDO2 — No — Bound to the domain
- Hardware key — No — Same standard, physical
- App code (TOTP) — Yes — Can be relayed to a fake site
- Push approval — Yes — Vulnerable to prompt fatigue
- SMS code — Yes — Also SIM-swap
- Email code — Yes — Only as strong as the inbox
Passkeys resist phishing because the browser checks the domain before signing. A fake site cannot obtain a usable signature.
Questions about the MFA & Passkeys poster
- What’s on the MFA & Passkeys poster?
- A 6-row table: Method · Phishable? · Note. Ordered by resistance to a determined attacker. Passkey / FIDO2 — No — Bound to the domain; Hardware key — No — Same standard, physical; App code (TOTP) — Yes — Can be relayed to a fake site; Push approval — Yes — Vulnerable to prompt fatigue; SMS code — Yes — Also SIM-swap; Email code — Yes — Only as strong as the inbox. Passkeys resist phishing because the browser checks the domain before signing. A fake site cannot obtain a usable signature.
- Who is the MFA & Passkeys poster for?
- MFA & Passkeys belongs to the Computing section rather than to a school year, because computing is not something one grade owns. Anyone learning security can pin it up — a beginner, a student mid-course, or someone revising years later.
- When should you use the MFA & Passkeys poster?
- Not all second factors are equal. SMS is far better than nothing and far worse than a passkey. A wall chart earns its place by being glanceable from where the work is happening, so MFA & Passkeys belongs on the wall where that computing work actually happens, within glancing distance, rather than filed away.
- What other posters go with MFA & Passkeys?
- Secrets, AuthN vs AuthZ and Hashing vs Encryption sit alongside MFA & Passkeys in the Computing section. Printed together they make a wall rather than a single sheet, which is how a reference set actually gets used.SecretsAuthN vs AuthZHashing vs Encryption
- Is the MFA & Passkeys poster free to download and print?
- Yes. MFA & Passkeys downloads as a free PDF with no account, no email and no watermark, like everything else in the Computing section. Print as many copies as you like for a home, a classroom, a library or a tutoring group; reselling the file is the only thing the licence rules out.Read the licence
- What size does the MFA & Passkeys poster print at?
- MFA & Passkeys is a vector PDF laid out for US Letter, and prints on A4 with Fit to page — the same file, no separate download. Because every mark on it is drawn rather than photographed, it stays sharp enlarged to A3, A2 or A1 at a copy shop. Colour carries emphasis only, so a greyscale print of MFA & Passkeys loses nothing.Printing guide
Related posters
Charts that sit alongside MFA & Passkeys on the same wall.
Browse every Computing poster, or start from the full catalogue.