Hacker News Reader

I really like how the TOTP Yubi Authenticator app works. Just saves my secret to the Yubikey and I can save that secret to multiple keys. Then put a printed copy of the QR-Code in the vault in case I get hit by a bus.

This covers destruction of phone, destruction of office, destruction of Yubikey, destruction of me.

I would like to use U2F, but some companies (looking at you AWS team) only allow 1 MFA method period. And that just doesn't work.

View on HN

> I would like to use U2F, but some companies (looking at you AWS team) only allow 1 MFA method period. And that just doesn't work.

That doesn't seem like an objection to U2F (or its successor WebAuthn) but more a reason not to use it for AWS or perhaps, if you have an alternative that does offer decent authentication, not to use AWS at all.

In this particular topic for example, the failures of AWS are no reason to avoid using the Yubikey's safer FIDO/ FIDO2 mode for your Google account.

Reply on news.ycombinator.com