> Do not UPS your Security Keys to bad guys. I think even my deceased grandmother could have figured that out, if I read stories about people being successfully

> Do not UPS your Security Keys to bad guys. I think even my deceased grandmother could have figured that out, if I read stories about people being successfully tricked into doing this I may despair about our species entirely You'd be surprised. Back in the day banks here used what amounts to a one-time pad as a second factor for auth. You'd wire money and the bank would ask you for code #37 on your one time pad. Each code would only ever be used once and if your codes were near to running out your bank would send you a new one time pad. A pretty clever and secure system you'd think. This of course didn't stop scammers from sending letters to people pretending to be their bank, asking if they could send in their old one-time pad and pin code in exchange for a new one time pad. Enough people fell for this for it to be an actual problem. It's not quite sending your security keys to the bad guys but it gets pretty close!