3 ms·
I have a couple of Yubikeys and I can hopefully answer some questions. 1. The Yubikey specific OTP was turned on by default on both of my keys. The particular
by JamesLeonis 3y ago
I have a couple of Yubikeys and I can hopefully answer some questions.
1. The Yubikey specific OTP was turned on by default on both of my keys. The particular default is a Yubikey protocol. An alternative OTP is the Challenge-Response HMAC [0] implementation which I use with Keepass.
2. The OTP is not necessary, and most websites use FIDO2/WebAuthn anyways. It would only be "necessary" if the service used that particular Yubikey OTP protocol instead of FIDO. I use the FIDO2 functionality as my preferred 2FA, falling back on the Yubikey app for TOTP keys.
[0]: https://docs.yubico.com/yesdk/users-manual/application-otp/challenge-response.html https://docs.yubico.com/yesdk/users-manual/application-otp/c...