Re:Show HN: YubiKey HMAC-SHA1 support for KeePassX
by tomkinstinch on Monday May 26, 2014 @04:45PM
(#7801550)
Looks nice. Is there functionality for a fallback/backup passcode in case the YubiKey is lost?
[ Parent
| on HN ]
Re:Show HN: YubiKey HMAC-SHA1 support for KeePassX
by hathvi on Monday May 26, 2014 @05:15PM
(#7801655)
Wouldn't this defeat the YubiKey's purpose? One of the points in the pull request mentions only supporting a single YubiKey, which I believe is how you'd most commonly solve this issue (having a backup YubiKey). It's also possible to store a backup of your KeePass database with a passcode somewhere safe.
Re:Show HN: YubiKey HMAC-SHA1 support for KeePassX
by 2bluesc on Monday May 26, 2014 @06:58PM
(#7802035)
Someone just asked this, I replied @ https://github.com/keepassx/keepassx/pull/52#issuecomment-44...
> Instead you can generate and save the 20 byte HMAC secret prior to programming the YubiKey. You could then program an infinite number of other YubiKeys with the same secret. See the screenshot in the PR showing the Yubico GUI tool, note the key field.