4 ms·
What is someone steals your backpack with your laptop and all your yubikeys, your phone, etc? How do you get back your access?
by blindriver 1y ago
What is someone steals your backpack with your laptop and all your yubikeys, your phone, etc? How do you get back your access?
- dfedbeef 1y agoDon't keep all of your yubikeys and phones and laptops in one bag.
- int_19h 1y agoUnfortunately, many services don't allow you to register multiple passkeys, so having a backup key that is stored somewhere safe is simply not an option.
- chipsrafferty 1y agoThat's why you have multiple passkeys that have the same key. It's a physical backup, not a software backup.
- crote 1y ago... at which point you lose the whole "something you have" part of 2FA. If they all have the same key, it is impossible to distinguish between individual copies, so the compromise of a single copy is impossible to detect. Additionally, you can't revoke a single copy: you are now forced to revoke all of them at once.
- rcxdude 1y agoIs that what you have set up? Can you describe how you do it in more detail? I'm looking for an option like this but everything I've found seems to suggest it's not possible (or at the very least wildly impractical). I'm looking for something where it's at least possible to make a physical backup that's still relatively secure.
- dfedbeef 1y agoYou only need multiple on your recovery email. Unless you're using Yahoo or running your own email server, this is an option.
- dfedbeef 1y agoIt might be possible to set it up on a home server idk. I would rather waste my time on other stupid things.
- esseph 1y agoI have 5 in Google.
- blindriver 1y agoThat doesn’t answer the question, unless it means you’re SOL. If that’s the case why on earth would I prefer passkeys to regular passwords as long as I practice safe password handling?
- dfedbeef 1y agoDo whatever you want. It's easier for me to have a primary recovery email and password manager with MFA that uses a yubikey and phone authenticator. Then I can use passkeys or whatever for the rest of the stupid accounts that I don't care about. Side note: I feel like people always say 'i can just use good passwords' and then their password is like '<sports reference><year>'
- chipsrafferty 1y agoDon't bring anythng you really wouldn't want to get stolen anywhere outside of your house.
- blindriver 1y agoWhat if your house burns down with all your contents? My point being, there is a reasonable limit to how many physical passkeys a person would make but there’s also a non-zero possibility that a physical catastrophe could occur that destroys all the passkeys. What happens in that case? Can you recover your accounts?
- tzs 1y agoMost sites currently have you create your account with a password, and then later you can add passkeys. If you still have your passwords after your house burns down you can use those to get into sites. If your house burning down also wiped out wherever you store your passwords, you'd use whatever mechanism each site provides for recovering from a lost password.