Cyber security · Interactive model
MFA vs the Attack Waves
"We have MFA" is not one answer — it's five very different ones. Pick how your account logs in, then launch waves of real-world attacks (password spray, credential stuffing, phishing, SIM-swap, MFA-fatigue) and watch which ones your choice actually stops. Spoiler: the jump from SMS codes to passkeys is the whole ballgame.
blocked 0
breached 0
your account
■ blocked■ got through