3 ms·

This seems a little restrictive if it doesn't have some sort of 2FA alternative, like a mobile TOTP app or something. I'd hate to be locked out of any accounts

This seems a little restrictive if it doesn't have some sort of 2FA alternative, like a mobile TOTP app or something. I'd hate to be locked out of any accounts for losing my MacBook, or to be unable to use the accounts from mobile or a different platform. As a secondary/simpler 2FA alternative I like it, but the description here doesn't do much to explain how to get around the problem of only having this available on my macs.

elchief 9y ago
the solution for actual U2F tokens is to buy 2 and put one in a safe deposit box. not sure what the solution is for software version
- ams6110 9y ago
  Something that 0.05% of people would actually do. And that's being generous.
- noja 9y ago
  Wouldn't work. Too inconvenient. What if you need to add another account? Go to the safe deposit box, create the account, then take it back again?
philip1209 9y ago
In general, U2F doesn't work on iPhones - so most sites offer multiple methods of secondary authentication (including Github, Facebook, and Google). So, it is a bit of a convenience - but it also more secure because it matches hostnames.
ndm 9y ago
TOTP via SMS or apps is required to set up a u2f key on GitHub.