Hardware security key experiences

@Pawnless Endgame

How are you getting on with your keys?

I've linked them with Google so far and they work across multiple (3) machines. My aim is to make Google passwordless so that it logs in with just the keys, although I'm not sure on contingency plan if the keys are lost or become faulty. I presume I can still use my authenticator app as a backup?
 
I've linked them with Google so far and they work across multiple (3) machines. My aim is to make Google passwordless so that it logs in with just the keys, although I'm not sure on contingency plan if the keys are lost or become faulty. I presume I can still use my authenticator app as a backup?
Yes you can still use your Authenticator app. Or a printed backup code.

Always have a backup.
 
Looking at getting a Yubico key for mainly my Google account. Is the ultimate security to use 2 keys and remove all other methods?
 
Looking at getting a Yubico key for mainly my Google account. Is the ultimate security to use 2 keys and remove all other methods?
two keys with one of them locked in a safe and the other hidden in your sock (even if someone find it - they aren't going to want to go near it) ;)
 
Looking at getting a Yubico key for mainly my Google account. Is the ultimate security to use 2 keys and remove all other methods?
Two PIN-protected hardware keys, stored in different places. Remove SMS 2FA (as that's the vulnerable one). Some printed codes as a last resort.

I have two Yubico Security Keys, one on my keyring, one in my desk drawer.

This thread has reminded me I need to buy add a third one and upgrade as it's a pain in the butt not being able to use the USB-A ones with my Mac Air.
 
Back
Top Bottom