Re:Passwordless authentication with FIDO2–beyond just the web
by BiteCode_dev on Wednesday February 22, 2023 @10:23AM
(#34896979)
I also use a password manager. Yukikeys are a poor choice for authentication despite what the article says.
But they are good for 2FA, which is what I need them for to mitigate the risk of phishing, siphoning credentials from my phone or just stupidity on my part.
A robber would still need the password so I'm safe for my threat model, which doesn't include state actors.
But you are right about one thing: adding those keys to all the important account, and adding a new one when you lose one, is a pain in the butt.
But they are good for 2FA, which is what I need them for to mitigate the risk of phishing, siphoning credentials from my phone or just stupidity on my part.
A robber would still need the password so I'm safe for my threat model, which doesn't include state actors.
But you are right about one thing: adding those keys to all the important account, and adding a new one when you lose one, is a pain in the butt.