alt Hacker NewsI never found a comfortable way to ensure all of my accounts had more than one U2F key associated with them. I always wished there was a way to have 2 physical U2F keys, one on me, and by adding one to an account, both would work.
As is, I had to either:
- Keep both on me, and add both - I am at risk of losing both at the same time
- Keep one one me, one in a safe - I have to keep track of which device I've added to which service, and periodically take the backup one out of the safe and iterate through the "new" services
I was never satisfied with either approach, so I ended up with an OTP app with backups.
If you're comfortable with OTP with backups, does a password manager like 1password, with backups, fit your needs? Or would you prefer to self-manage your backups on your own storage?
I ask because I'm curious about others' practices and desires here, not with any promise of a better solution!