3 ms·
Yubikey has a lot of features (applets) built-in so the answer is "it depends on what you use". U2F? You need to have a second one or backup codes. OpenPGP? Y
by Leace 8y ago
Yubikey has a lot of features (applets) built-in so the answer is "it depends on what you use".
U2F? You need to have a second one or backup codes.
OpenPGP? You probably have your subkeys backed up somewhere so you just order a new Yubikey and put your subkeys there.
The same goes to PIV (X.509 certs). If you have some keys generated on the card, you need to provision your new Yubikey from the beginning.
- anilakar 8y agoHow do you enroll a new U2F key to all the websites at once?
- Snawoot 8y agoIt's not possible, unfortunately. So you'll have to do it one by one.
- Boulth 8y agoYes, and it's by design. If you could then one random root key would be sufficient to "restore" all keys (as they are derived from that root key). U2F explicitly doesn't allow that given that the protocol has use counters.