4 ms·
To solve this I keep multiple yubikeys and track which ones are registered by tagging services with specific values in my password manager: "yubikeyA", "yubikey
by dmm 5y ago
To solve this I keep multiple yubikeys and track which ones are registered by tagging services with specific values in my password manager: "yubikeyA", "yubikeyB", etc.
I keep the backup yubikeys in safe places and periodically when they are available I search in keepassxc for entries tagged with A but not B, for example, and add the missing yubikey to that service.
The following search in keepassxc will show entries with the attribute "yubikeyA" but lacking "yubikeyD":
attr:yubikeyB !attr:yubikeyD
- est31 5y agoTo be safe from fires, natural catastropies, etc. you ideally place your 2fA devices to multiple people you trust, that you may have to travel to. But sadly, webauthn doesn't let you enroll devices without having direct access to them. So it makes this setup a bit harder than it could be.
- dmm 5y ago> you ideally place your 2fA devices to multiple people you trust That's a really good point. I keep a key with a friend in another city. When I visit them I use a query like the one above to determine any services that need to be registered with the normally unavailable key. > So it makes this setup a bit harder than it could be. I wish there was a way to enroll keys without them being present.