0

Is their a way you can make two yubikeys generate the exact same password at the exact same time? (identical copy) I am wanting to purchase two of them so I am able to store a backup yubikey in a secure location just in case I loose the main yubikey.

I am mainly interested in this for SSH keys and Keepass database's

2

If they were initialized with the same seed and had been through the same number of iterations, it's probably possible.

What you should be doing is registering the two different keys to the same account. Should you lose one, invalidate it.

  • Does the iteration matter? – Andrew Hoffman Oct 20 '14 at 17:59
  • I just know that google's authenticator has no idea what iteration it's on. – Andrew Hoffman Oct 20 '14 at 18:01
  • 2
    @AndrewHoffman: Google's Authenticator uses OATH-TOTP, where the current timestamp is used as the "iteration". But Yubikeys (as well as OATH-HOTP) have an incrementing counter, and the validation server actually remembers the last iteration it verified, preventing rollback. – grawity Apr 19 '15 at 12:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.