3 ms·
If you have a hardware key setup for anything you want sustainably operated in the future, you register at least two keys, and when one fails or is lost, you p
by DANmode 2y ago
If you have a hardware key setup for anything you want sustainably operated in the future,
you register at least two keys, and when one fails or is lost, you pull the emergency backup out of a safe and register new one(s).
- nicolas_17 2y agoYou also have to pull the emergency backup out of the safe when signing up for a new thing. It's highly inconvenient.
- throwaway48476 2y agoStill more convenient than getting locked out.
- drdaeman 2y agoIt becomes questionable if you’re halfway across the world from your safe.
- lxgr 2y agoTrue, but what's even more convenient than that is to just not use hardware authenticators for anything but the most important accounts/sites, and e.g. use syncing credentials (as provided by many password managers, Google, and Apple). The fraction of people willing to regularly schedule enroll-o-ramas at each of their accounts and each of their backup key locations is probably smaller than a percent of all potential WebAuthN users.