Which is more secure??

#yubikey #onlinesecuritytips #2fa

[rainbowspeedy]

But if you create a backup yubikey, isn't that like duplication?

[pavolkolencin-pavol]

Time based authentication like this has to be set on the provider side. Like if I activate one on some server they generate the code (also qr code) and I add it to ath app or yubinkey. With that code I can add it to another app(as many as I want) but same with yubikey. I don't see difference.

[Melker]

The Yubikey solution has one flaw that most certainly does not apply to everyone. The fact that it is physical means that it more easily can be replaced/destroyed for no other reason or motivation then pure spite. And it takes time to discover this because the phone is often deemed trustworthy.

Farfetched perhaps - but it IS a risc not to completely ignore. Not all relationships are happy. Especially not with alcohol and bad divorces thrown into the mix.

[onlyagreeingsometimes]

It phone and computer companies change the USB port and discontinued the access and updates to your old devices, is there a way to swap or link the old keys passwords to the new keys

[thomaspayne]

Why don’t these keys have a thumbprint scanner?

[tossedsalad]

do you think yubikey resistance to phishing and to mitm attack might be just a tad relevant?

[stean]

I get your point and correct me If I am wrong but isn't the number of 2FA codes supported by the yubikey limited?

[simonmaersk]

Okay so if you use a TOTP app like Aegis (Android only) that doesn't sync to the cloud or any online server, you're just as safe as if you use a YubiKey?

[synonys]

TOTP on a security key isn’t a great feature, the slots are limited guaranteeing fragmentation across multiple keys. There are many secure apps for TOTP such as Aegis etc

[crackjoker-ybjp]

Buy a ledger wallet, it has a 2FA function. If you lose it just buy another ledger wallet and install the same seed phrase. Rinse and repeat.

[Mr-x-]

Youbikey is not that strong 😂 Google used it once and reported 0 successful attacks so then they invented their own key and forced all their workers to set it up 😅

[vinn]

passkeys infinitely over both of these, dumb hardware keys are just a second static password lol

[teddmented]

That’s $120 for two keys very expensive

[AMPR]

Says duplication is inherently less secure then immediately buying a duplicate Yubikey just in case.