News for hackers. Stuff that matters.

A comment on Twitter reveals surprisingly low two-factor auth (2FA) adoption rate. Parent comment

Re:Twitter reveals surprisingly low two-factor auth (2FA) ad... by est31 on Friday July 23, 2021 @12:07PM (#27932264)
To be safe from fires, natural catastropies, etc. you ideally place your 2fA devices to multiple people you trust, that you may have to travel to. But sadly, webauthn doesn't let you enroll devices without having direct access to them. So it makes this setup a bit harder than it could be.
[ Parent | on HN ]
Re:Twitter reveals surprisingly low two-factor auth (2FA) ad... by dmm on Friday July 23, 2021 @04:47PM (#27935449)
> you ideally place your 2fA devices to multiple people you trust

That's a really good point. I keep a key with a friend in another city. When I visit them I use a query like the one above to determine any services that need to be registered with the normally unavailable key.

> So it makes this setup a bit harder than it could be.

I wish there was a way to enroll keys without them being present.

[ Parent | on HN ]