41–50 of 187 posts
Honest question, what happens when you lose one of these ?
You should have backup 2FA methods for that case, either more tokens at different locations or other 2FA methods like TOTP or printed one-time backup codes or all of these together.
Honest question, what happens when you lose one of these ?
corollary to this is that you shouldn't ever get only one.
Honest question, what happens when you lose one of these ?
It's also easy to get two yubikeys and have a backup ready to use immediately.
As to U2F, there is always a backup method (usually TOTP generated by Google Authenticator, and additionally recovery codes).
Honest question, what happens when you lose one of these ?
If I get the new Yubikey, my plan is to put the old one in a safe as a backup.
Earlier quoted context omitted.
It's smart to buy two at the same time. While you can't copy a Yubikey, you can choose how to initialize them and you can initialize both identical to one another and then lock them down. That way they're copies of one another and fully backed up. I keep my main one on me at all times and have my backup in a safe place.
Do you have a link to the docs that shows this? From what I can find on their site [1] it only supports a few of the protocols: -Static Password -HMAC-SHA1 Challenge-Response -OATH-TOTP (Yubico Authenticator) [1] https://support.yubico.com/support/solutions/articles/150000...
Earlier quoted context omitted.
For 2FA, having multiple of these or some kind of recovery code tends to be the answer, as you can remove the keys from sites you use it on. I am less willing to use something like this for passwordless logins. These types of devices should be part of the "something you have" part of 2FA, which should always be paired with a "something you know". Maybe I'm missing a step here, but why would you ever use this for pass…
Because the something you know part isn't all that secure anyway? https://xkcd.com/538/
Note that you quickly get to the point where you need more than one person involved. You can compromise one person as much as you want, but if that person doesn't have the complete secret it doesn't do any good.
This is fantastic! I'm super psyched about this. > Works on Microsoft Windows, macOS, Linux and on major browsers such as Chrome, Firefox, Safari, Edge, and Opera [1] I looked everywhere for documentation of Safari support but came up empty-handed. Does anyone know where this is documented? I've been waiting for this since forever. [1]: https://www.yubico.com/product/yubikey-5-nfc/
This is fantastic! I'm super psyched about this. > Works on Microsoft Windows, macOS, Linux and on major browsers such as Chrome, Firefox, Safari, Edge, and Opera [1] I looked everywhere for documentation of Safari support but came up empty-handed. Does anyone know where this is documented? I've been waiting for this since forever. [1]: https://www.yubico.com/product/yubikey-5-nfc/
Looks like Webauthn support is being added to Safari. https://bugs.webkit.org/show_bug.cgi?id=181943
I went with the 4.
Technical Manual at https://support.yubico.com/support/solutions/articles/150000... : > Like FIDO U2F, the FIDO2 standard offers the same high level of security, as it is based on public key cryptography. In addition to providing unphishable two-factor authentication, the FIDO2 application on the YubiKey allows for the storage of resident credentials. As the resident credentials can store the username and other data,…
https://developers.yubico.com/U2F/Protocol_details/Key_gener...
I'm curious what these resident keys are for.