Hacker News new | ask | show | jobs
by borplk 2817 days ago
If you can just fall back to authenticator app by saying "oops don't have yubikey now" then you get no extra security for using a yubikey.
1 comments

You may consider that the authenticator offers enough security but a Security Key is more convenient. I hate typing 6-digit codes into things, touching the little contact or pressing the button on my Security Keys is much more tolerable.

Now, personally I wouldn't want the phishable Authenticator as fallback, but it's definitely better than SMS for example.