Do I need both CAPTCHA and MFA?Because PasswordFree™ MFA is also bot resistant, there is a strong case for why it can replace CAPTCHA. It has low friction, is simple to understand and it protects users against other security threats such as phishing and website impersonation attacks.
Updated NIST Guidelines for Authentication 800-63-B further defining the different levels of authentication strength for “verifier impersonation resistance”. This is a key defense against all forms of social engineering, MitM, Browser-n-Browser, website impersonation, and Phishing attacks. How strong is your authentication?