From 67929b23c21ebd9e147c510af2e3eafff61ee2e0 Mon Sep 17 00:00:00 2001 From: Vladyslav Krylasov Date: Sun, 3 May 2020 17:43:54 +0100 Subject: [PATCH] Describe how to backup OTP codes --- README.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/README.md b/README.md index 3895fd6..cd038f9 100644 --- a/README.md +++ b/README.md @@ -29,6 +29,7 @@ If you have a comment or suggestion, please open an [Issue](https://github.com/d - [Verify](#verify) - [Export](#export) - [Backup](#backup) + * [Backup OTP codes](#backup-otp-codes) - [Configure Smartcard](#configure-smartcard) * [Change PIN](#change-pin) * [Set information](#set-information) @@ -1135,6 +1136,14 @@ $ doas mount /dev/sd2b /mnt/public $ gpg --armor --export $KEYID | doas tee /mnt/public/$KEYID.txt ``` +## Backup OTP codes + +There is a tricky way to have the same OTP codes on several YubiKeys with +[YubiKey Authenticator](https://www.yubico.com/products/services-software/download/yubico-authenticator/). For instance, +if you've got YubiKey 5C and YubiKey 5 NFC then it's possible to install the authenticator to your PC and phone, insert +YubiKeys to phone and PC and scan a 2FA QR code on both devices. In such situation, you will have the same OTP code on +two YubiKeys what's good in case of a lost/stolen key. + # Configure Smartcard **Windows** Use the [YubiKey Manager](https://developers.yubico.com/yubikey-manager) application (note, this not the similarly named older YubiKey NEO Manager) to enable CCID functionality.