Hacker News Reader

Now I've only got one problem remaining: how do I upgrade my old U2F-capable NEO on all the websites? Do I have to keep it with me ad infinitum? I cannot really destroy it either, as I cannot be 100 % sure I've remembered to enroll my new Yubikey 5.

This raises a more generic question: What's the proper upgrade path for hardware authentication tokens?

View on HN

> This raises a more generic question: What's the proper upgrade path for hardware authentication tokens?

This is the reason why I'm still using only a password manager. I agree that a hardware token more security but the lost/stolen/change key problem is really not easy right now.

I hope there will be a new common API to change all enrollment you have done but it seems hard as the key don't even know them.

Maybe in a future version ?

Reply on news.ycombinator.com