2 ms·
The recommendation is to use two keys or to always have an additional backup method configured. So you should never be in a position where a migration is requi
by akira2501 2y ago
The recommendation is to use two keys or to always have an additional backup method configured. So you should never be in a position where a migration is required.
- Animats 2y agoYes. My other Yubikey is in a bank vault. I do not want a remote "authentication provider".
- anilakar 2y agoHardware tokens are physical objects that are subject to mechanical wear and tear and can be lost. Hardware tokens are also subject to ending up on a hardware attestation blacklist because of security weaknesses. I have already had to replace two Yubikeys for the aforementioned reasons, so FIDO hardware token migration is a very real scenario that desperately needs to be addressed. Also mind that there are too many services that allow you to only use one FIDO token, or even worse, only one primary 2FA method in addition to backup codes.