News for hackers. Stuff that matters.
Re:Passwordless authentication with FIDO2–beyond just the web by BiteCode_dev on Wednesday February 22, 2023 @10:23AM (#34896979)
I also use a password manager. Yukikeys are a poor choice for authentication despite what the article says.

But they are good for 2FA, which is what I need them for to mitigate the risk of phishing, siphoning credentials from my phone or just stupidity on my part.

A robber would still need the password so I'm safe for my threat model, which doesn't include state actors.

But you are right about one thing: adding those keys to all the important account, and adding a new one when you lose one, is a pain in the butt.

There are no comments on this comment yet.