For the mother example, it would not be hard, for example, my mother to be tricked into. Personally, I don't trust someone elses security practises. Also, even a loving partner won't be so loving in case of breakup or divorce.Įven if everybody is trustworthy, they are not to be all trusted due to digital literacy. If you only need FIDO2, maybe try cheaper options and buy 2 for each person.ĭo you REALLY trust everybody in your family? Always prepare for everything! I don't even trust my mother with my credentials. Now, the full YubiKey 5 NFC is worth it and, I believe it is the best option in the market. YubiKeys are expensive and, in my opinion, the plain Security Keys are not worth it for 25EUR each. If you only need FIDO2, just buy the cheaper security keys, 2 for each person. If something happens, you can't trust who did it, since the device would use the same PIN for everybody. Now, imagine having an offsite backup that you have to keep synced up for 2 people. I have my backup and it's a pain having to register it. With YubiKey 4, if you forget where you have connected the YubiKey, then anyone who finds an old YubiKey in the trash can use it.ĭue to the ways credentials are presented when having multiple for the same site, it is VERY easy to miss something and choose the wrong option.

While some FIDO2 websites ask for a PIN and some don't, you can still reset the internal key. Moreover, U2F can be used by anyone having possession of the key and doesn't require a PIN. The YubiKey 4 always uses the same internal key for generating U2F credentials. The YubiKey 4 does not support FIDO2, only U2F.

Yubico 5c