Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t...
by rob-olmos on Friday August 20, 2021 @05:51PM
(#28251823)
The recommendation is to have at least one backup key.
There's also a WebAuthn extension in the works to at least make it easier to maintain a backup key by not having to pull it out of the safe every time you register MFA with a new service:
Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t...
by shawnz on Saturday August 21, 2021 @09:02AM
(#28256676)
I really wish I could find a password manager which supports WebAuthn, and can also be unlocked with WebAuthn, so that only one secret needs to be replaced in such a situation.
There's also a WebAuthn extension in the works to at least make it easier to maintain a backup key by not having to pull it out of the safe every time you register MFA with a new service:
https://www.yubico.com/blog/yubico-proposes-webauthn-protoco...