4 ms·
If you can't properly backup your FIDO credentials the practical security for vast majority of individuals is much, much worse than TOTP. It is extremely inconv
by tjoff 4y ago
If you can't properly backup your FIDO credentials the practical security for vast majority of individuals is much, much worse than TOTP. It is extremely inconvenient and the risk of locking yourself out is truly massive.
Does Solo Keys enable that?
Generate whatever you need on your PC and then load it into as many keys you feel like.
- FredFS456 4y agoI bought two keys, keep one at home and one on my keyring. If my house burns down AND I lose my keys, there's account recovery codes that they have you note down - those I keep offline in geographically separate areas.
- psanford 4y agoThats the point of passkeys. They can be backed up and sync'ed between devices. But even if you don't want to use the popular passkey implementations, you can still easily register multiple authenticators which mitigates the risk of losing one. On a new site, I'll register my hardware FIDO key, my phone as a passkey, and my laptop authenticator (either touch-id on MacOS or tpm-fido on linux machines). Soon there will be other passkey implementations that will also support syncing and backups (1password for example is working on this). Don't settle for a phishable authentication method.
- tjoff 4y agoUntil a satisfactory implementation exist I'll take the phising alternative every day of the week. We'll see how it plays out but I'm not optimistic this is going to end well.
- psanford 4y ago> We'll see how it plays out but I'm not optimistic this is going to end well. Why? Its all open standards. There are already a number of independent implementations in the works.