2 ms·
You can have more than two hardware tokens on your account, the lowest limit I've ever seen is 5. If you break 5 keys at once, I think having to go through some
by zaarn 8y ago
You can have more than two hardware tokens on your account, the lowest limit I've ever seen is 5. If you break 5 keys at once, I think having to go through some verification is warranted.
- _pdp_ 8y agoSure. That will be the case in extreme circumstances like your tokens for the AWS root account, etc. The average consumer will have only two at best.
- zaarn 8y agoBut how likely is it that they loose two keys at once, especially since one is basically made to be part of the keychain...
- cjcampbell 8y agoAnd if your second key is not convenient to access, the typical user will not remember to link it to their account as a backup.
- zaarn 8y agoWhich is why Google Advanced Protection requires you two register two keys for it to work, not only one.
- cjcampbell 8y agoIt’s lovely when this is the case, but not always (though keeping accounts/keys in sync gets messy) Unfortunately, for an AWS root or IAM account, the limit is still one per https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_u2f.html https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credenti...
- crispyporkbites 8y agolost my aws 2fa on a free tier account, after 12 months it started charging around $5/month, they wouldn't let me shut down my account without a signed document from a lawyer identifying me (this would have cost me £60 and a load of time/hassle), this went on for months until my credit card expired and they stopped billing me.
- zaarn 8y agoThat's really the fault of AWS having a bad security policy (U2F standard documents recommends storing multiple keys for this purpose)