Unfortunately, that strategy won't work if using the Yubikey as a TOTP generator for a Fidelity account because it appears that only one TOTP 2FA sequence can be associated with a login.The usual practice is to set up a primary hardware key, and a backup hardware key. Then store the backup hardware key in a safe deposit box.Out of curiosity, what happens if the hardware key dies? I was thinking of using the Authy app.
Sometimes an online service will provide an additional list of recovery codes. I documents them in my password application (KeyPass 2 or KeyPassXC).
But if a hardware key or phone for that matter configured for TOTP codes is lost or stops working, I think you still can call Fidelity customer service to configure a Symantec VIP app instance (at least for now). Perhaps they will drop Symantec as an option at some point, but probably not. They likely will support account recovery by phone in any case.
Services where you could be permanently locked out from 2FA device failure would be Google or an AppleID as examples.
Statistics: Posted by Northern Flicker — Fri Sep 13, 2024 1:53 am — Replies 10 — Views 609