But the Yubikey is a much more secure solution. The recommended solution is to use a different application to generate the code. Mostly I consider them a safety net, but I don’t think they’re all that practical. I keep that in Authy, so even if someone tried to access my 1Password account, they wouldn’t be able to without the 2FA code.Īs far as the Yubikeys go… I have a couple, but I rarely use them. The only exception to my 1Password use for 2FA is 1Password itself, for obvious reasons. For example, I think Grammarly offers 2FA, but I can’t figure out what bad thing would happen if someone figured out my 60+ character 1Password-generated password and managed to access my Grammarly account. I don’t use it on some places where the risk/value seems extremely low.

I use it almost everywhere I can, mostly because 1Password makes it so easy by copying the 2FA code to the clipboard when you auto-fill the password. So my question is: How many MPU’ers use 2FA widely and what device do you use for the second factor? I’m mostly curious about the machines you use at home. I use LastPass, so my experience will be specific to that, but I am sure it will extend to 1Password as well. (If you do have a backup key, you would also need to register both keys with your services otherwise the backup key won’t work) My spare key is not in a safe, but it is in a locked drawer. I’d bet that’s why Rose’s spare key is in a locked safe. To that end, if you have multiple security keys, know where each of them are at any given moment. It doesn’t “know” persay which key to use, it just knows which keys it should accept then accepts them indiscriminately. It doesn’t care which key is being used as long as the key has previously been registered with the account.Īll of that is to say that no, 1Password shouldn’t be confused when using different keys on different devices. Then it’ll prompt you for your 2FA using your Yubikey (Or other FIDO compatible security key). So on your Mac, you’d log in with your master password. Once they are registered, you can use any of them when accessing your account. Any service I’ve seen has allowed multiple keys to be registered. When you go to setup the Yubikey, you register them with the platform you are using for your account. Basically it is like having an additional password to your account (don’t worry, I mean this is a safe and secure way). I think you are misunderstanding how the Yubikeys work.

Yubikey 5ci ipad pro