Hacker News Reader

I do care about security, but if I lose my yubikey and i can't backup it, then I need to keep some (insecure) account recovery options enabled.

If I can backup my passkeys, then I can disable them.

View on HN

Yubikey advise you to buy two keys and keep one with you and one in a safe space, only used for recovery. That requires the service you use it on to allow multiple keys though, and that’s unfortunately not always the case.

But you always need the second one to set it up for each service.

It's fine if you do that for two or three services. But my password manager has around 600 entries. If I would need to set up all of them on both keys and always switch the active one with the one in the safe location for setting up a new account I would go crazy. Having both of them in the same place kind of defeats the purpose of having two keys, as you would lose them together.

So better have a synced password manager and unlock the password manager with a hardware key.

Reply on news.ycombinator.com