4 ms·

I can't believe it's taken them this long for proper 2FA.

• lysp 7y ago
  Not proper as it only allows a single key.
  • FabHK 7y ago
    You could argue that it’s up to you to have a proper key backup strategy (ie not Google Authenticator). You don’t have several user names and passwords for one account, either.
    • tialaramex 7y ago
      The specification for WebAuthn (Security Keys) explicitly tells implementers they SHOULD support multiple tokens because otherwise the recovery scenario is terrible. You can't realistically "back up" cheap Security Keys, their whole design is predicated on your being unable to extract the secret inside them which makes them work.
      • FabHK 7y ago
        Thanks, I stand corrected.