3 ms·

For 500 accounts you would need 20 yubikeys. That’s quite a yubikeyring.

• vaylian 3y ago
  True. I personally prefer non-residential keys that don't take up any space on your yubikey. The keys are reconstructed on the fly based on a value that I receive from the server I am authenticating against. Passkeys are residential keys and they consume storage. The minor upside is that they free the user from remembering their username.
  • growse 3y ago
    The other upside is that you can store them in either HSMs or software-backed stores (password managers) or hybrids (like your phone). It's trade-offs all the way down!
    • vaylian 3y ago
      Can't you do the same thing with non-residential keys?
      • growse 3y ago
        You can. But then you miss out on credentials discovery.