5 ms·

I actually associated a Yubikey to my account because I was so annoyed at this problem. I wanted a better backup plan than the physical printed codes idea. I di

I actually associated a Yubikey to my account because I was so annoyed at this problem. I wanted a better backup plan than the physical printed codes idea. I didn't realize that a better 2FA app would have solved this :P

AdmiralAsshat 7y ago
Not everything supports Yubikey/FIDO U2F at this point, so that wouldn't work for everything, although I do have one. My Gmail account itself is behind a Yubikey (and a a backup Yubikey), not a 2FA app, because I'm trying to avoid a Game Over scenario. The Gmail address is the recovery address for my password manager account, so getting that pwned is basically the keys to the kingdom for every other account.
- bickeringyokel 7y ago
  I realize not everyone wants to leave Gmail, but another reason I'm thinking of using tutanota aside from e2e encryption is you can create a second user that's tied to your master account. You can reset the passwords of your sub accounts from the main accout if they are compromised.. of course you have to pay for multiple accounts though.
- Vinnl 7y ago
  The weird thing is: Yubikey was the only option for me in Gmail. Only after I associated a Yubikey with it, was I able to also use an authenticator app. Does anyone know if this is normal behaviour, and if so, what the reasoning behind it is?
  - angry_octet 7y ago
    That's weird, probably a glitch. TOTP is the basic option.
skybrian 7y ago
Having printed access codes in your safe doesn't seem worse than a backup Yubikey in your safe? Maybe better, since electronic devices can break.
- angry_octet 7y ago
  Either way, put it in a tamper evident envelope in the safe.
notlukesky 7y ago
I use SAASPASS Authenticator for personal services and it has search capabilities and also optional autofill on both desktop (with browser extension) and mobile. The codes can also be copy/pasted from the web portal. The same Authenticator codes can be on multiple devices including tablets. You have multiple different backup and restore capabilities including mobile number WITH a master password. https://saaspass.com/ https://saaspass.com/ Full disclosure: I work for a SI that integrates SAASPASS IAM to enterprises.

AdmiralAsshat 7y ago

Not everything supports Yubikey/FIDO U2F at this point, so that wouldn't work for everything, although I do have one. My Gmail account itself is behind a Yubikey (and a a backup Yubikey), not a 2FA app, because I'm trying to avoid a Game Over scenario. The Gmail address is the recovery address for my password manager account, so getting that pwned is basically the keys to the kingdom for every other account.

bickeringyokel 7y ago
I realize not everyone wants to leave Gmail, but another reason I'm thinking of using tutanota aside from e2e encryption is you can create a second user that's tied to your master account. You can reset the passwords of your sub accounts from the main accout if they are compromised.. of course you have to pay for multiple accounts though.
Vinnl 7y ago
The weird thing is: Yubikey was the only option for me in Gmail. Only after I associated a Yubikey with it, was I able to also use an authenticator app. Does anyone know if this is normal behaviour, and if so, what the reasoning behind it is?
- angry_octet 7y ago
  That's weird, probably a glitch. TOTP is the basic option.

skybrian 7y ago

Having printed access codes in your safe doesn't seem worse than a backup Yubikey in your safe? Maybe better, since electronic devices can break.

angry_octet 7y ago
Either way, put it in a tamper evident envelope in the safe.

notlukesky 7y ago

I use SAASPASS Authenticator for personal services and it has search capabilities and also optional autofill on both desktop (with browser extension) and mobile. The codes can also be copy/pasted from the web portal. The same Authenticator codes can be on multiple devices including tablets. You have multiple different backup and restore capabilities including mobile number WITH a master password. https://saaspass.com/ https://saaspass.com/ Full disclosure: I work for a SI that integrates SAASPASS IAM to enterprises.