This free white paper from The Practice discusses the limitations of two-factor authentication (2FA) and emphasizes the necessity of adopting more risk aware, user-friendly security solutions. More nuanced, passive strategies are discussed in the context of how they can both fortify defenses against ATO attacks and ensure a smoother, less intrusive login process for consumers.