New answers tagged


I think it should be possible for each user to get multiple keys, if your key gets lost or stolen (or in case of the tokens that have their own battery, if the battery dies) you should always have a backup token, so you can get in (and disable the other token for example) that's also the reason Google, Github and Dropbox allow Multiple U2F devices.


You need to activate the --expert mode to select arbitrary combinations of algorithms and capabilities (inside given technical limitations, DSA keys will never be able to have signing capability). $ gpg --expert --edit-key [key-id] [snip, key-listing] gpg> addkey Please select what kind of key you want: (3) DSA (sign only) (4) RSA (sign only) ...


You should be aware that any mechanism to implement 2factor with KeePass is not fundamentally adding any true security. Any attacker who gets a hold of your database will simply not install the OTPKeyProv plugin, and will not be required to use the second factor. OTP 2-factor provides authentication, not encryption, and only works in scenarios where the ...

Top 50 recent answers are included