Passwordless Sign-In VS 2 Factor?

[Cobra]

Im currently using 2 factor. Which is better or more secure?
Thanks

 

[fredbert]

Is this question in the context of DSM 7's Secure Signin or more about the concepts in general?

 

[Cobra]

dsm 7

 

[fredbert]

I'd say that 2FA is stronger as it combines password with another method: approved sign-in (passwordless); hardware device; one-time password. So since passwordless is an option within 2FA then 2FA is better / more secure / less convenient.

Sign-In Method​

In addition to the traditional password, DSM offers other sign-in methods for users to choose from. You may use a mobile device or a hardware security key to complete the identity verification process, or use them in combination with 2-factor authentication for enhanced account security.

From the DSM help:

	First sign-in step	Second sign-in step
Traditional Authentication	Password	N/A​
Passwordless Sign-In	Choose from the following options: Password Approve sign-in Hardware security key	N/A​
2-Factor Authentication	Password	Choose from the following options: OTP (one-time verification code) Approve sign-in Hardware security key

It also seems that you can add more than one second method for 2FA, as it says that the apps only support OTP.

2-Factor Authentication | DSM - Synology Knowledge Center

Synology Knowledge Center offers comprehensive support, providing answers to frequently asked questions, troubleshooting steps, software tutorials, and all the technical documentation you may need.

kb.synology.com

 

[Cobra]

Thank you