3 ms·
You can keep just the public part of the backup key on your current device and always enroll the two keys at a time. But yeah, if the main device is stolen, it
by vladvasiliu 3y ago
You can keep just the public part of the backup key on your current device and always enroll the two keys at a time.
But yeah, if the main device is stolen, it can be a pain to go update all the services with the new device’s key.
I personally use the gpg app on my youbikey for this, and the secret key comes from a backup I install on a livecd.
- fbdab103 3y agoAh duh, keep the public part on the device. However, that very quickly gets into the problem of untested backups. I am then relying completely upon a private key which has never been validated to work.