7 ms·
What is it with this bullshit practice of requiring TOTP/SMS setup first before using security keys! I've seen this all over the place, seemingly copied from al
by oxplot 7y ago
What is it with this bullshit practice of requiring TOTP/SMS setup first before using security keys! I've seen this all over the place, seemingly copied from all the existing ones. Basically they're saying, you must have a less secure 2FA before using a more secure one. Even github does this circus show but at least it lets you register two keys. So what I do is to setup TOTP, add two keys and then remove the TOTP on my phone.
As for limitation of one key, I use my Yubikeys with TOTP as well, so for services that don't support more than one security key, I store the same TOTP private key on both my security keys and get around it.
- allset_ 7y agoEverything on one Yubikey? What if you lose it?
- ComputerGuru 7y agoNo, I do the same thing. You generate the TOTP seed once and simultaneously install it on both Yubikeys.
- StuffedParrot 7y agoHow does it work to use with your phone? Last I checked there were very limited options for NFC compared to USB.
- SAI_Peregrinus 7y agoNFC works fine with the Yubico authenticator app, IME. Using a Yubikey 4 NFC (USB A + NFC). USB-C works fine with the Yubico authenticator app, IME. Using a Yubikey 5c. Haven't used the lighting one, as I don't have an iPhone. Probably fine. The one annoyance is that there's no USB-C + NFC key yet. Edit: on my old phone I also used a USB-OTG (Micro-B male to A female) adapter with a normal Yubikey4, which worked (but was an ugly kludge).