5 ms·

What happens if you lose your Yubikey? Are there scratch codes? It's bad enough now if your house burns down with all your iOS devices in it.

• Philip-J-Fry 4y ago
  It's recommended to always have a backup key stored in a safe location for this reason. The article actually says so: >At least two FIDO® Certified* security keys that work with the Apple devices that you use on a regular basis. >You must add and maintain at least two security keys. You can add up to six keys.
  • wrldos 4y ago
    Ahha I missed the "at least two" part. I can get behind that no problems at all. Now all I need is a USB-C hole in my iPhone... Edit: ok they come in NFC as well. There goes €100...
    • lxgr 4y ago
      > There goes €100... If cost is a concern, you're buying the wrong keys. You can get FIDO-certified CTAP2 tokens for much less these days (even Yubico's is only about €25 apiece).
      • wrldos 4y ago
        Cost is not a concern.
• kube-system 4y ago
  You use your backup key, that you must have. Apple won’t let you use this with a single key.
  • TylerE 4y ago
    And if the backup key is lost? Most safes aren’t really THAT fireproof
    • kube-system 4y ago
      You can have more. But honestly if my house burned down and I lost my fire safe too, IDGAF about my Apple ID. And if I did care that much, I’d put one off site.
    • ComputerGuru 4y ago
      It's more than just that. I'm not going to have a separate backup key for each online service - I'm going to have one main key and one main backup. That means the backup needs to be accessible so every time I add the main key to a login, I can add the backup too. This rules out keeping the backup in an actually safe place, like a lockbox at a friend's, at the bank, etc. and means the safest option you have is a "fireproof" safe in the same home.
• MBCook 4y ago
  > It's bad enough now if your house burns down with all your iOS devices in it. This is what recovery contacts are for.
  • alistairSH 4y ago
    My wife’s devices would all burn as well. So now I have to ask a friend, which just feels weird. And hopefully they stick to Apple devices (my son switches back and forth).
    • filmgirlcw 4y ago
      I have an extra YubiKey and a printout of my 1Password stuff and my Apple FileVault key printed out and in a safe deposit box. I’m not paranoid about a lot of stuff, but in the event there is a catastrophic incident and all of my devices are impacted (I personally have 4 Macs, 3 iPads, two iPhones and multiple Apple Watches), the important stuff is available if my emergency contacts aren’t.
      • daydream 4y ago
        Worth a read: Safe deposit boxes aren’t safe https://www.nytimes.com/2019/07/19/business/safe-deposit-box-theft.html https://www.nytimes.com/2019/07/19/business/safe-deposit-box...
        • filmgirlcw 4y ago
          Yeah, I know that’s a downside. I try to check every 5 years or so. But there is nothing that is going to be truly fool proof, so I figure my best option is to have as many safety levers as possible and do what I can to never lose my phone.
        • weberer 4y ago
          https://archive.is/7qbkR https://archive.is/7qbkR
• photoGrant 4y ago
  To answer your question, though -- yes. There is a backup key also generated that you can either print or save elsewhere. You must retype the backup key to continue.