Reply to thread

Message

<blockquote data-quote="kC77" data-source="post: 1025089" data-attributes="member: 92796">I&#039;m a big fan of the yubikey bio... Use it for every service I can, so much more secure.. quicker and easier than totp... Fido/webauthn no need to register it and unlike the normal non bio yubikeys you at least have the requirement of biometrics instead of just &quot;any human can touch it&quot;I would worry about owning a non biometric yubikey about &quot;if I was in an accident or incapacitated.. Or death...&quot;&nbsp; With a standard key the only protection is the pin you have set.With a non biometric key I&#039;d really worry about storage and placement of my backup key..With existing totp it was such a bind to open an authenticator app... Copy a code ... Sometimes waiting for it to timeout.. Then pasting it, that quite often I just click &quot;trust this device/remember me&quot; While 2fa is good... Its the fact or saving that device that leads to a potential weakness. With the yubikey bio and the supported services I have no need to &quot;trust or remember&quot; any device ... Just an extra prompt to tap my key and read biometrics for 2fa... Takes 2 seconds.Sites still requiring totp seem old school... And often out of laziness if its generic site/forum or something non critical&nbsp; I&#039;ll Just &quot;trust this device&quot;Even so this is only on devices I own and trust.Yubikey bio..Amazing device... Highly reccomend.</blockquote>

[QUOTE="kC77, post: 1025089, member: 92796"] I'm a big fan of the yubikey bio... Use it for every service I can, so much more secure.. quicker and easier than totp... Fido/webauthn no need to register it and unlike the normal non bio yubikeys you at least have the requirement of biometrics instead of just "any human can touch it" I would worry about owning a non biometric yubikey about "if I was in an accident or incapacitated.. Or death..." With a standard key the only protection is the pin you have set. With a non biometric key I'd really worry about storage and placement of my backup key.. With existing totp it was such a bind to open an authenticator app... Copy a code ... Sometimes waiting for it to timeout.. Then pasting it, that quite often I just click "trust this device/remember me" While 2fa is good... Its the fact or saving that device that leads to a potential weakness. With the yubikey bio and the supported services I have no need to "trust or remember" any device ... Just an extra prompt to tap my key and read biometrics for 2fa... Takes 2 seconds. Sites still requiring totp seem old school... And often out of laziness if its generic site/forum or something non critical I'll Just "trust this device" Even so this is only on devices I own and trust. Yubikey bio..Amazing device... Highly reccomend. [/QUOTE]

Verification