Security keys are kind of intimidating at first, but dirt easy to use once you set them up. Most of your security key questions are answered here (and tell me ones that I missed!) https://techsolidarity.org/resources/security_key_faq.htm …
-
-
Show this thread
-
Reddit revealed today that they got hacked because someone intercepted an SMS. It is very important, particularly if you work in journalism, that you become a fanatical doctrinaire about using security keys and password managers (1password is the standing recommendation)
Show this thread -
If you work on this stuff at Twitter, please make it possible to add multiple security keys to an account!
Show this thread
End of conversation
New conversation -
-
-
If I'm using an app like google authenticator is that just as good? Or should I be buying a yubikey?
-
You should be buying a Yubikey! The authenticator app is great, but if I can get you to enter your password and code on an impostor site, I can still log into your account. The security key protects against that scenario by talking to the browser and matching the URL
- Show replies
New conversation -
-
-
You mean Facebook and Google accounts, correctly I might add.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Also: what are your thoughts on using Firfox in addition to Chrome, they have support for u2f security keys since ... November (2017) , and the newer WebAuth protocol since v.60
#2fa -
My understanding is that you still need to enable U2F support in about:config for it to work on Firefox
- Show replies
New conversation -
-
-
This Tweet is unavailable.
-
I tested it and that *appears* to be the case, but I would love corroboration either way.
End of conversation
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.