Hacker News new | past | comments | ask | show | jobs | submit login

That's fair. Although, for my password manager, you need both password and 2FA to access it, whereas a FIDO key would just require stealing the physical key.

Does there exist FIDO key (other than phones) that require a password to "enable"? For example, when it's plugged into a new device, the key locks until you input some master password?




Most smartcards require you to authenticate to them before they will perform operations using their private cryptographic keys. I'm adding WebAuthn support to my smartcard middleware [0].

[0] https://cackey.rkeene.org/


The Ledger Nano S requires you to enter a pin code at least




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: