Didn't the password do that already? The one that can be changed?

lawnchair_larry · on Nov 7, 2019

No. Passwords can be phished. Even password+OTP has proven to be weak. This cannot be phished, and it’s far more user-friendly.

The fingerprint is not a password replacement. The yubikey is a password replacement. The fingerprint prevents a random person from using your yubikey before you notice that it’s gone and you revoke it.

hirsin · on Nov 7, 2019

Passwords can be used from anywhere. Keys cannot. That is the attack this blocks.