News for hackers. Stuff that matters.
Re:Apple Passwords Deserve an App by cstrahan on Monday March 27, 2023 @04:37PM (#35332167)
Well, with the exception of AWS, unless something has changed recently — they notoriously only support one second factor (i.e. if you use YubiKeys or similar, you can only use one).
Re:Apple Passwords Deserve an App by stouset on Monday March 27, 2023 @04:41PM (#35332213)
Yeah, AWS is the only exception I've encountered :)

But if you have backup second factors (you have backup second factors, right?) and you're worried about Passkey lock-in for whatever reason… just use that other second factor for AWS or any other account which supports only one.

Re:Apple Passwords Deserve an App by JimDabell on Monday March 27, 2023 @06:23PM (#35333598)
You can add multiple MFA devices since November of last year:

> Now, you can add multiple MFA devices to AWS account root users and AWS Identity and Access Management (IAM) users in your AWS accounts. This helps you to raise the security bar in your accounts and limit access management to highly privileged principals, such as root users. Previously, you could only have one MFA device associated with root users or IAM users, but now you can associate up to eight MFA devices of the currently supported types with root users and IAM users.

— https://aws.amazon.com/blogs/security/you-can-now-assign-mul...