3 ms·
One option is to have two identical security keys. In general, you can't easily read the secrets from an existing key, but you can overwrite/initialize them to
by PeterisP 4y ago
One option is to have two identical security keys. In general, you can't easily read the secrets from an existing key, but you can overwrite/initialize them to get two with identical data.
- Tomte 4y agoMost services allow you to enrol two or more security keys, so you wouldn't need to overwrite one.
- PeterisP 4y agoThe problem with that is that it requires to have all these security keys available in order to enrol them, which is not possible if you want to store one of them in a different secure location. If you have two keys in your pocket, that's not much of a backup; having two identical keys means that you can enrol the one in your pocket and if it gets lost, the copy from your safe works.
- Tomte 4y agoDo you sign up to new services daily? I'm thinking of it more like sign up today, store the second elsewhere and don't think about it again.
- PeterisP 4y agoNot daily, but something like weekly - I certainly signed up for more than 50 new accounts/systems in this last year, and a few of them had 2FA.
- TheFlyingFish 4y agoIs this possible with Yubikeys? I'd be very interested if so. "Two identical Yubikeys" is something I've wanted for a long time.
- PeterisP 4y agoIIRC https://www.yubico.com/support/download/yubikey-personalization-tools/ https://www.yubico.com/support/download/yubikey-personalizat... could be used for that.