5 ms·

Honest question: if I lose the keys to my house, I can call a locksmith etc. If I lose my hardware key I reckon I am screwed?

stingraycharles 4y ago
That is why they require two keys. What you’re describing is indeed true, if one key gets lost or breaks and you don’t have a backup, you’re effectively locked out. That’s a feature, not a bug.
- pfortuny 4y ago
  Ok thanks!
user3939382 4y ago
Only use hardware keys on services that let you use multiple (lookin at you AWS). I keep at least 2 backups.
- scarface74 4y ago
  https://aws.amazon.com/blogs/security/you-can-now-assign-multiple-mfa-devices-in-iam/ https://aws.amazon.com/blogs/security/you-can-now-assign-mul...
  - digianarchist 4y ago
    They still don't allow multiple MFAs on the root account for console access.
    - scarface74 4y ago
      > Now, you can add multiple MFA devices to AWS account root users and AWS Identity and Access Management (IAM) users in your AWS accounts
      - user3939382 4y ago
        Thank you!! Finally ayayay
        deleted 4y ago
        [deleted]
      - digianarchist 4y ago
        Right. I’m in my root account dashboard and I can add only one token. https://imgur.com/a/Ft2wlNm https://imgur.com/a/Ft2wlNm
        scarface74 4y ago
        From the link: > How to manage multiple MFA devices in IAM > You can register up to eight MFA devices, in any combination of the currently supported MFA types, with your root users and IAM users. To register an MFA device Sign in to the AWS Management Console and do the following: For a root user, choose My Security Credentials. For an IAM user, choose Security credentials. For Multi-factor authentication (MFA), choose Assign MFA device. Select the type of MFA device that you want to use and then choose Next. ——
        digianarchist 4y ago
        I read the article my man. You’re still restricted to one MFA via the console on the root user. I don’t care what the page says the instructions aren’t valid. https://imgur.com/a/ApK8qk8 https://imgur.com/a/ApK8qk8 Check the comments, looks like it's a screw-up on their end.
        scarface74 4y ago
        My bad. It seems to still be rolling out. > Hey Andrew, a small number of AWS accounts require additional configuration changes on our end before customers can take advantage of the new feature. We are currently working on making the required configuration changes and we will notify you when your account configuration is updated. For additional support, please submit a support request or reach out to your designated technical account manager.
- deleted 4y ago
  [deleted]

stingraycharles 4y ago

That is why they require two keys. What you’re describing is indeed true, if one key gets lost or breaks and you don’t have a backup, you’re effectively locked out. That’s a feature, not a bug.

pfortuny 4y ago
Ok thanks!

user3939382 4y ago

Only use hardware keys on services that let you use multiple (lookin at you AWS). I keep at least 2 backups.

scarface74 4y ago
https://aws.amazon.com/blogs/security/you-can-now-assign-multiple-mfa-devices-in-iam/ https://aws.amazon.com/blogs/security/you-can-now-assign-mul...
- digianarchist 4y ago
  They still don't allow multiple MFAs on the root account for console access.
  - scarface74 4y ago
    > Now, you can add multiple MFA devices to AWS account root users and AWS Identity and Access Management (IAM) users in your AWS accounts
    - user3939382 4y ago
      Thank you!! Finally ayayay
      - deleted 4y ago
        [deleted]
    - digianarchist 4y ago
      Right. I’m in my root account dashboard and I can add only one token. https://imgur.com/a/Ft2wlNm https://imgur.com/a/Ft2wlNm
      - scarface74 4y ago
        From the link: > How to manage multiple MFA devices in IAM > You can register up to eight MFA devices, in any combination of the currently supported MFA types, with your root users and IAM users. To register an MFA device Sign in to the AWS Management Console and do the following: For a root user, choose My Security Credentials. For an IAM user, choose Security credentials. For Multi-factor authentication (MFA), choose Assign MFA device. Select the type of MFA device that you want to use and then choose Next. ——
        digianarchist 4y ago
        I read the article my man. You’re still restricted to one MFA via the console on the root user. I don’t care what the page says the instructions aren’t valid. https://imgur.com/a/ApK8qk8 https://imgur.com/a/ApK8qk8 Check the comments, looks like it's a screw-up on their end.
        scarface74 4y ago
        My bad. It seems to still be rolling out. > Hey Andrew, a small number of AWS accounts require additional configuration changes on our end before customers can take advantage of the new feature. We are currently working on making the required configuration changes and we will notify you when your account configuration is updated. For additional support, please submit a support request or reach out to your designated technical account manager.
deleted 4y ago
[deleted]