←back to thread

FIDO Alliance publishes new spec to let users move passkeys across providers

(fidoalliance.org)
225 points Terretta | 1 comments | 15 Oct 24 12:18 UTC | HN request time: 0.205s | source
Show context
anilakar ◴[16 Oct 24 06:29 UTC] No.41856170[source]▶
OK. Let me know when I can migrate FIDO credentials from old Yubikeys to new ones.

Earlier this year I almost lost a domain because $REGISTRAR forced 2FA and I had forgotten to add them to my key spreadsheet.

replies(4): >>41856221 #>>41856513 #>>41857751 #>>41862113 #
akira2501 ◴[16 Oct 24 07:33 UTC] No.41856513[source]▶
The recommendation is to use two keys or to always have an additional backup method configured. So you should never be in a position where a migration is required.
replies(2): >>41856552 #>>41857729 #
1. Animats ◴[16 Oct 24 07:39 UTC] No.41856552[source]▶
Yes. My other Yubikey is in a bank vault.

I do not want a remote "authentication provider".