4 ms·
I was reading about WebAuthn. What if my security key gets stolen?
by happppy 8y ago
I was reading about WebAuthn. What if my security key gets stolen?
- Hackbraten 8y agoOne common method is to secure the hardware key with a PIN. The key will only do its work (e. g. sign things) if the correct PIN is entered. It will also destroy the secrets it keeps (or even itself) after a given number of failed attempts. If this is not feasible for some reason, you need to change or revoke your secrets as soon as you know the key is stolen.