2 ms·
It is really annoying that more sites don't support multiple security keys, though. As far as I can tell, it's not encouraged by the FIDO Alliance and I can't t
by brendoelfrendo 2y ago
It is really annoying that more sites don't support multiple security keys, though. As far as I can tell, it's not encouraged by the FIDO Alliance and I can't think of a good technical reason for it.
- vel0city 2y agoThe vast majority of sites I've used Yubikeys for have supported multiple. About the only one that I use which still doesn't to my knowledge is Paypal.
- brendoelfrendo 2y agoMaybe I'm out of date, then! I don't enroll new keys very often. Paypal is a great example of a service that I would like to support multiple keys, though, so it's disappointing that they still only support one.
- fullstop 2y agoI forget which financial institution I was using at the time, but they explicitly only supported one key. That is, you add a new one and the old one is expunged. Banks are so slow with this sort of thing, and still require SMS as a fallback option.
- beezle 2y agoHow often do you check to see that those other/backup keys are still secure? This attack becomes easier if the attacker knows of the secondary key(s) location and because of disuse they aren't even necessary to replace.