I would like to secure an AWS root account with a hardware MFA device, which seems to be simple enough, but I also want a backup device to store in a different location. AWS doesn't seem to support multiple MFA devices on the same account, but if I could get a synchronized pair of MFA devices they would effectively be a single device to AWS.

Is it possible to buy pairs of such devices?


You can buy hardware devices, that can be seeded like the Yubikey, the etoken pass or some Feitian tokens. Thus you can put the same seed provided by AWS on multiple hardware devices.


If you use the virtual one, you can print the QR code and/or write down the secret. Multiple Google Authenticators can scan the same code, or you can type it in manually to Google Authenticator.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.