Resources
Security guides
Plain-language guides for IT and security teams: how attacks get past MFA, what actually stops them, and how authentication options compare. Every guide links its sources, so you can check each claim.
Last updated
Threat guides
How an attack works, why common defenses miss it, and what IT can do today.
-
Device-code phishing: what it is and how to stop it
Device-code phishing gets attackers into Microsoft 365 and Google accounts through the real sign-in page, past MFA. How it works, why MFA and passkeys don't stop it, and how to block it in Entra ID, Okta and Google Workspace.
Comparison guides
Side-by-side comparisons, each vendor's column drawn from that vendor's own documentation.
-
Alternatives to Okta FastPass
Okta FastPass compared with WinMagic MagicEndpoint, Beyond Identity, HYPR and Cisco Duo, for teams that keep Okta and want phishing-resistant sign-in beyond the browser.
-
Alternatives to Microsoft Entra passwordless
Windows Hello for Business and Entra passwordless compared with WinMagic MagicEndpoint, Beyond Identity, HYPR and Cisco Duo, for teams that keep Entra ID.
About these guides
Frequently asked questions
What do WinMagic's security guides cover?
How attacks get past MFA, what actually stops them, and how authentication options compare.
Who writes WinMagic's security guides?
WinMagic, a security company founded in 1997 that makes MagicEndpoint passwordless authentication and SecureDoc encryption.
How are the guides checked?
Every claim links to its source. Statements about other vendors come from that vendor's own documentation, and each guide shows the date it was last updated.
Have a question a guide should answer?
Tell us which sign-in or phishing question your team keeps running into, and we'll consider it for the next guide.