3 ms·

There is nothing to remember except to bring the damn keys. Once they're in your pocket, you're done.

• patmorgan23 3y ago
  Yeah, except physical devices get lost, stolen or damaged. So there needs to be some accounts recovery procedure/alternative auth mechanisms.
  • cbsmith 3y ago
    ...and there are, and they're remarkably similar to what you do with Yubikeys: you have extra keys, and when you lose one, you uses the other to get in, and then you invalidate the old keys (although in the physical world, this means getting a new lock and a new set of keys, instead of just getting one new key and removing the lost key as a valid key).
    • bombolo 3y ago
      Except you'd have to invalidate a yubikey on countless websites.
      • cbsmith 3y ago
        I mean, if you're using a key to get in to countless physical things, then you have the same problem.
        • bombolo 3y ago
          Do you have countless homes?
          • cbsmith 3y ago
            I do not. None of the locks for my home are on a network where you can broadcast key updates either. I also tend not to have one key that can access my house, my car, my safety deposit box, my safe, my bike, my locker, etc.