4 ms·

I would like a hardware access token I could duplicate in order to keep couple of backups in safe, remote locations.

• c22 5y ago
  Why not just register the backups as additional keys? Then you could configure an alert for any time they're used.
  • theamk 5y ago
    This means you have to pull your backup key out of storage every time you register for a new service. And that rules out a lot of safe places to keep it at.
  • kevincox 5y ago
    This works fairly well when you are using it for 1 or 2 services. But if I use this hardware device for every service I use creating a new device would be a month long process, and missing one service could result in lock-out. I do the same with my PGP key. I keep the "original" key offline and securely stored but I clone the key into my HSMs. That way the devices I use daily and frequently carry around can't be cloned and have strong brute-force protection (although malware could use my key while the device is compromised) and I can still "mint" new hardware devices without updating my PGP key everywhere and worrying about re-encrypting all old data that I still need. This is definitely less secure than using keys generated on hardware devices but for most of my usecases this tradeoff makes more sense.
• simonmales 5y ago
  Trezor can function as a hardware token. And you can duplicate them as by sharing the seed with each new one.