3 ms·

https://www.yubico.com/support/download/yubikey-personalization-tools/ https://www.yubico.com/support/download/yubikey-personalizat... you can do a lot with a

• tialaramex 6y ago
  You can tell the device you want a new random secret (so now your existing credentials don't work), but you can't get the secret out (obviously bad guys would use that, so it would be a terrible idea) neither can you set the current one to an explicit value.
  • desmond373 6y ago
    So you can set the current one at the start of your use and keep the secret hidden somewhere forever. Sounds like the solution to me.
    • tialaramex 6y ago
      Evidently the way I wrote this previously wasn't clear enough, so I have attempted to improve this text. No, you can have a random new value (effectively like you bought a different one), but you won't learn what that is, so it doesn't help you and there's no way to "keep the secret hidden somewhere" except in the sense that it's hidden inside the device where it belongs.
  • PeterisP 6y ago
    You definitely can initialize Yubikey OATH-TOTP with a known value in order to have multiple devices with identical secrets. I have done that, also see https://support.yubico.com/hc/en-us/articles/360016614880-Can-I-Duplicate-or-Back-Up-a-YubiKey- https://support.yubico.com/hc/en-us/articles/360016614880-Ca...