In Q3 2025, Firebase Auth’s MFA adoption stalled at 12% of active projects despite 68% of developers citing “inadequate security posture” as their top concern. Firebase Auth 2026’s rewritten MFA engine changes that: independent benchmarks show a 40% reduction in account takeover (ATO) risk for enabled projects, with zero added latency for 92% of authentication flows.

📡 Hacker News Top Stories Right Now

Dav2d (193 points)

Inventions for battery reuse and recycling increase seven-fold in last decade (112 points)

Do_not_track (76 points)

VS Code inserting 'Co-Authored-by Copilot' into commits regardless of usage (15 points)

NetHack 5.0.0 (266 points)

Key Insights

40% reduction in ATO risk for projects enabling the new MFA engine, per OWASP Benchmark 2026 tests

Firebase Auth 2026.0.0+ introduces the WebAuthn-first MFA engine, replacing the legacy TOTP-only stack

Zero additional p99 latency for 92% of auth flows; 18% reduction in auth-related support tickets in beta

80% of Firebase Auth projects are…