On: WebAuthn Browser Support

[mschuster91]

IIRC, Twitter, Google, Dropbox and Facebook also don't allow to enroll multiple Yubikeys (ETA: Looks like I'm a bit outdated).

In general, most platforms don't really account for the scenario "my 2nd factor got stolen/robbed/destroyed/lost" beyond also offering a phone app and printed recovery records - and the end result is that a house fire, flood or storm scenario locks out users permanently.

[pchm → mschuster91]

> IIRC, Twitter, Google, Dropbox and Facebook also don't allow to enroll multiple Yubikeys.

Don't know about Dropbox, but I set up Yubikeys for Twitter, Google and Facebook recently and they all allow multiple keys.

[mwarkentin → pchm]

Yeah, that's just false.. just checked and my Dropbox supports multiple as well. AWS is the only one I know of that only allows a single key.

[ArchOversight → mschuster91]

Google has allowed you to register multiple keys since they introduced the ability to use security keys.