3 ms·

That's why you have multiple passkeys that have the same key. It's a physical backup, not a software backup.

• crote 1y ago
  ... at which point you lose the whole "something you have" part of 2FA. If they all have the same key, it is impossible to distinguish between individual copies, so the compromise of a single copy is impossible to detect. Additionally, you can't revoke a single copy: you are now forced to revoke all of them at once.
  • xg15 1y ago
    > Unfortunately, many services don't allow you to register multiple passkeys Doesn't this already make that scenario a nonstarter? I can't revoke individual keys if I can only register one key in the first place.
  • esseph 1y ago
    You can revoke individual ones.
• rcxdude 1y ago
  Is that what you have set up? Can you describe how you do it in more detail? I'm looking for an option like this but everything I've found seems to suggest it's not possible (or at the very least wildly impractical). I'm looking for something where it's at least possible to make a physical backup that's still relatively secure.