25 ms·
How would multiple people share the second factor?
by eli 9y ago
How would multiple people share the second factor?
- Artemis2 9y agoWe have a two-man rule for such accounts: one person (or one group) is responsible for the password, and the other has the 2FA secret on their Yubikey. The other rule is to not use these accounts; as an example use use root AWS accounts once or twice a year when we need to fill in their forms.
- user5994461 9y agoHow about just do it? Ever shared a USB key or a company phone. There isn't much to describe.
- eli 9y agoI guess if all the people who need access are in the same physical location that works.
- lotsofcows 9y agoBy sticking the same base code into Google Authenticator or similar?
- eli 9y agoI didn't think that was possible at least with Google accounts. But now that I think about it, if you set up both devices from the same QR code (instead of running through the process twice) it should work. Good idea.