What I Wish I Knew About U2F and Other Hardware MFA Protocols

Re:What I Wish I Knew About U2F and Other Hardware MFA Proto... by sly010 on Friday April 16, 2021 @08:16PM (#26840461)

Needless to say, I don't use these devices on my home depot account. I use them for Google, Github, Dropbox, I don't actually remember anything else. My DNS registrar doesn't support it :P

I also don't use my personal key for work stuff and recovering my work key is my sysadmins problem :)

That said, when I had admin accounts at work, we used TOTP with a similar scheme: when we registered important (admin) accounts we shared the second factor (the QR code) between 2 people and sometimes I printed the QR code itself. This works for AWS, gsuite, github, etc. I still receive calls from old colleges for TOTP codes occasionally :)

[ Parent | on HN ]

Re:What I Wish I Knew About U2F and Other Hardware MFA Proto... by craftkiller on Friday April 16, 2021 @09:13PM (#26840788)

I actually just changed my DNS registrar to namecheap specifically because it supports U2F. I figure my domain is too important to risk losing because I use my domain for email.

[ Parent | on HN ]