Ask HN: AWS registering MFA will be required in 29 days

Re:Ask HN: AWS registering MFA will be required in 29 days by dotps1 on Friday October 11, 2024 @11:35AM (#41810411)

Personally I would do all of them.

I would make a passkey and stick it in Bitwarden so I have it with me on all my devices.

I would link my account to my authenticator app.

Then I would also register my yubikey I keep on my keychain.

[ Parent | on HN ]

Re:Ask HN: AWS registering MFA will be required in 29 days by herodoturtle on Friday October 11, 2024 @02:38PM (#41812112)

It sounds like you have experience with all 3 options, in which case may I ask:

If you had to pick 1, which of the 3 options is the most streamlined / causes you the least amount of hassle?

We're a relatively small dev team (~5 people) if that influences the answer in any way.

Thanks for the tips!

[ Parent | on HN ]

Re:Ask HN: AWS registering MFA will be required in 29 days by dotps1 on Friday October 11, 2024 @08:08PM (#41815187)

Least amount of hassle is probably a passkey in your password manager, if it supports it.

Passkeys are the quickest way to sign in.

Don't use a passkey on your computer, otherwise you will only be able to sign in from that computer.

If you find yourself struggling with passkeys, then the "authenticator" route is next best.

This just gives you a QR code, which you can also store in your password manager and have it generate one time codes.

If you have an authenticator app on your phone, you can rescan that same QR code to have the codes both places. (password manager and authenticator app)

[ Parent | on HN ]

Re:Ask HN: AWS registering MFA will be required in 29 days by stephenr on Saturday October 12, 2024 @01:23AM (#41816644)

> Don't use a passkey on your computer, otherwise you will only be able to sign in from that computer.

This is only true if you don't use a password manager which syncs passkeys.

[ Parent | on HN ]