5 ms·
What happens if the keys get lost or destroyed? It seems like a never ending problem.
by rb808 7y ago
What happens if the keys get lost or destroyed? It seems like a never ending problem.
- sliken 7y agoGet 2 keys, keep one in a safe place. Add both to your important accounts. Then also setup TOTP, so if you lose both keys and have a working cell phone with the app installed you can still login.
- song 7y agoThat's if important accounts allow you to do that. For example AWS only allow one MFA key
- sdan 7y agoI have one at work/keep on my computer and one at home. Some websites allow TOTP which is still safer than SMS, but if I lose one, I'll get another one while I use the 2nd.
- rb808 7y ago> I have one at work This seems really easy to steal. > one at home Most people I know have been burgled too.
- munchbunny 7y agoKeep two or three, put one in a bank or a safe at home. That should be enough redundancy for most people. As long as you can still get in to revoke/enroll stuff you should be okay. It’s not so much a problem as it is a balance of security, redundancy, and effort. You decide where you want to be on that balance of considerations.
- bsder 7y ago> Keep two or three, put one in a bank or a safe at home. That should be enough redundancy for most people. Yeah, good luck. I don't know of any system that lets me enroll 3 security keys for an account.
- henkslaaf 7y agoDoesn't Google let you set an arbitrary amount?
- munchbunny 7y agoYes, as does Github and Facebook. I forget whether AWS does.
- cookingrobot 7y agoSafe deposit boxes aren’t safe: https://www.google.com/amp/s/www.nytimes.com/2019/07/19/business/safe-deposit-box-theft.amp.html https://www.google.com/amp/s/www.nytimes.com/2019/07/19/busi...