GitHub Supports Web Authentication (WebAuthn) for Security Keys

Re:GitHub Supports Web Authentication (WebAuthn) for Securit... by roca on Wednesday August 21, 2019 @05:42PM (#20762145)

Make sure to print out some backup codes. Also I have two Yubikeys authorized for each of my U2F/Webauthn accounts. Fortunately managing multiple hardware keys is much easier with U2F/Webauthn than with TOTP... at least with Google/AWS/Github, you can add a new key at any time, while with TOTP I had to generate a new TOTP secret and update both keys at the same time.

[ Parent | on HN ]

Re:GitHub Supports Web Authentication (WebAuthn) for Securit... by marksomnian on Thursday August 22, 2019 @06:16AM (#20766449)

Yeah, that seems like the best bet - either hardware key or TOTP (because, although hardware keys are better for security, not all users will have one - cf. myself), and then store your backup codes in a password manager.

[ Parent | on HN ]