3 ms·
> I have 2 yubikeys and always register them both How does this work? Do you have to physically retrieve both any time you sign up with a new service? If that
by spiffytech 4y ago
> I have 2 yubikeys and always register them both
How does this work? Do you have to physically retrieve both any time you sign up with a new service?
If that's how it works, it sounds like a choice between two bad options: either having both of them handy at the same time, hurting redundancy, or registering them at separate times, hoping you remember to do both. Is that the case?
- goodoldneon 4y agoThat’s what I do. I keep my backup in a fireproof, airtight container
- jdfhfjdhjdhdfj 4y agoexcuse me if i think this is BS. You will have to retrieve your key when you sign to a new service. at this point you risk losing both. or are you saying you cloned the private keys and know how to correctly advance the counters when you need the backup?
- goodoldneon 4y agoI don’t use 2 factor for most sites. Do I really care if my HN account is compromised? So for sites that I do care about (e.g. GitHub), yes I register both. It isn’t as inconvenient as you’d think because I don’t sign up for many sites. Since I use my Yubikey for SSH, I’m frequently adding both Yubikeys as authorized keys on machines. But I keep an authorized_keys file with both public keys so I don’t need to physically grab my backup