undefined | Better HN

0 pointsdalke2y ago0 comments

Right, but my question was how to handle the "oh shit!" case where you need to start from scratch, like getting your things stolen when in another country.

Today I can connect to my email server using a library computer (or hotel guest computer, or rental business desk), log in with my password, and be able to contact someone who can help, or download a copy of the ticket for printout.

If I switch to passkeys, will this recovery method still work? Do I keep a Yubikey on a keychain? And USB A/C adapter?

Proton Pass seems to require installing something on the machine, which would seem to reduce the number of options I have.

0 comments

obelus2y ago

I personally keep a Yubikey on my keychain (pin protected) with backups for critical webauthn/passkeys.

dalkeOP2y ago

That requires being able to plug in your device, right?

How many such keys are needed? I'm guessing about 5? Give a couple to trusted friends, in case my residence burns down, keep one with me, and two at home as backup, because I know I'll lose things?

How often should I verify they still work? (Backups don't exist until you've restored, so I assume the same applies here?)

Everything I see about passkeys makes me think the failure mode can be more tragic than using passwords, and the use case is for people willing to trust Apple or Google.

I think I'm willing to trust Proton - for one, they support deGoogled Android - but I don't understand the risks in switching, or what backup practices I need.

j / k navigate · click thread line to collapse