5 ms·
What if you don't really have friends. Not really an uncommon thing.
by natly 4y ago
What if you don't really have friends. Not really an uncommon thing.
- dewey 4y agoPut it in a safe deposit box or store it at a notary like a will. There's multiple ways to store a piece of paper offsite without having friends or family.
- horsawlarway 4y agoYou still have to be able to prove to THOSE entities that you are who you say you are. And I say that as someone who has a spare yubikey sitting in a safe deposit box. Eventually, this would probably work out, but it still feels super shitty.
- maccard 4y agoThat's not a technical problem though. Going to a bank and saying "my house burned down, here's an affidavit or a notarised document stating I am who I say I am" is fairly likely 5o get you access again.
- gpmcadam 4y agodo you clone the ubikey or enroll two different keys? i struggled to find providers who let you register a second key
- tymscar 4y agoYou can’t clone a yubikey
- OJFord 4y agoYou can store keys generated off-device though. Depends which protocols you care about.
- horsawlarway 4y agoI enrolled two different keys. It's a pain in the butt, and it's very limiting because adding another secure service means going to the bank, so I try to limit the 2fa through yubikeys to things like my password manager, my keycloak instance, and other very important accounts. My take is that 2fa is still not there yet, and I'm a little worried about the push for webauthn, since I foresee a lot of potentially lost accounts.
- nicknow 4y agoIt's SUPPOSED to be a shitty/frustrating/annoying process, not easy. This is your "break glass in case of emergency" solution - you don't want to ever use it and you want it to be super hard for someone else to compromise it. We have plenty of ways to make this easy but if all those avenues are blocked because of some black swan event, you need a backup - and that backup can't be too easy because then it invites attack.
- mst 4y agoMy first thought in that case would be to store fragments in multiple semi-trusted places that don't know which other semi-trusted places are involved with Shamir's Secret Sharing so "knowing what a majority of the semi-trusted places even are" is a prerequisite to recovery.