For one it can only store 32 accounts, which I'm already pushing. The other option is having TOTP codes on your yubikeys, but this was too much of a pain for me. In the end if you do it this way you probably won't need to add accounts to your set of yubikeys or need to access your backup very often. It makes bitwarden a single point of failure, but it is secured with a strong password and yubikey and auto-locks itself pretty quickly, so I consider it secure. Most of my everything is in bitwarden, including TOTP codes. TBH, still not that many sites take them, mostly the big tech players, basically zero banks. As long as you have 2 working keys you can access easily, not a huge deal if it takes an extra week to go retrieve your 3rd key to add it.
So yeah any time you sign up for a new account somewhere that takes a yubikey you would have to (eventually) add it to your off-site backup key too. Every site that you register to use with yubikeys separately keeps track of which keys have been registered with it.
0 kommentar(er)
