3 ms·
From a KeePassXC maintainer: > In the lead up to this thread I received three reports of this new package method crippling people's workflow. One report was a
by lawn 2y ago
From a KeePassXC maintainer:
> In the lead up to this thread I received three reports of this new package method crippling people's workflow. One report was a user who couldn't open their database anymore because the yubikey feature was removed. Let that sink in for a second. People who lose access to their most important secrets can sometimes do irrational things in the moment of panic.
https://github.com/keepassxreboot/keepassxc/issues/10725#issuecomment-2105085740 https://github.com/keepassxreboot/keepassxc/issues/10725#iss...
- guilhas 2y agoEveryone using an offline password manager without having a backup might as well consider everything lost This sounds like emotional blackmail How many times I lost everything, hardware failure, updates that broke OS, using dd in the wrong drive...
- valicord 2y agoHow would a backup help in this scenario? The data is fine, it's the application that stopped working.
- guilhas 2y agoIf the yubikey stops working, you also loose access to the database So I would have a backup with a simple password, or even unencrypted in a USB somewhere
- valicord 2y agoYou backup the yubikey seed (whatever it's called) separately from the password db, so that the attacker still has to get 3 separate pieces of information (db, password, seed) to get the full access.
- guilhas 2y agoIf you backup the "seed" hotp secret you can probably use any OTP client software to open the DB without needing the yubikey
- lawn 2y agoWhat you usually do with YubiKeys is have multiple of them so that if the key stops working or you lose it you can use the spare. This is more secure than using a simple password or (gasp) an unencrypted copy somewhere.