They keyfob isn't tied to a unique identity, the goal is to actually prevent websites from correlating account. From the IEEE article: > One device should be s

They keyfob isn't tied to a unique identity, the goal is to actually prevent websites from correlating account. From the IEEE article: > One device should be sufficient with a reasonable number of websites for which users have accounts. But, for privacy preservation, the websites mustn’t be able to correlate users based on the device.