4 ms·
I wouldn't be comfortable with one backup device kept in secure storage somewhere. If it fails you won't know, and you'll be operating without redundancy witho
by jlokier 7y ago
I wouldn't be comfortable with one backup device kept in secure storage somewhere. If it fails you won't know, and you'll be operating without redundancy without knowing.
So that means keeping two or more devices in regular use. Somehow, without carrying them both around or keeping them in the same places. Tricky.
- acdha 7y agoIt means testing your backups and knowing what your unlock procedure is like — for example, can another administrator at your company perform that reset for you? This doesn't need to be something you do daily so you can schedule it but this is a classic security tradeoff: if you're not comfortable with the odds of multiple hardware devices simultaneously failing, you can simply decide to accept the greater security risk of using shared SSH keys or whatever you're using to manage passwords.