4 ms·
You might want to look into what the FIDO Alliance is doing with WebAuthn. The problem is already being solved.
by Rafert 5y ago
You might want to look into what the FIDO Alliance is doing with WebAuthn. The problem is already being solved.
- PranavBerry 5y ago> FIDO Alliance is doing with WebAuthn Yes I looked into it, but it looks like WebAuthn does not support multiple devices (let me know if I am wrong). What if I want to login from two different devices? I don't think that is possible with WebAuthn, but using my authenticator you can login to multiple devices. You will also be able to add a recovery email address to my authenticator to recover your accounts if you phone gets damaged/lost.
- ViViDboarder 5y agoYes it is. I can plug my Yubikey into as many laptops as I would like. > You will also be able to add a recovery email address to my authenticator to recover your accounts if you phone gets damaged/lost. This worries me. That means I have to trust you to not leak my 2FA. Authy does this already and so I don’t use Authy. All my 2FA is on my Yubikey.
- PranavBerry 5y ago> plug my Yubikey into as many laptops as I would like. What if you don't own a physical key? > I have to trust you to not leak my 2FA. Authy does this already and so I don’t use Authy This is optional. You can choose not to have a recovery email. Just curious though, what do you do if your Yubikey gets stolen/damaged/lost?
- ViViDboarder 5y agoI have a backup Yubikey as well as backup codes stored in an encrypted file and backed up to several different devices.