2FA for Apple ID... you need two hardware keys that you use ON A REGULAR BASIS??

Cotillion189, 7 months ago

I have 3 keys. One is for regular use at home, second is with me on the go and third as a backup.

Showroom7561, 7 months ago

Yubikeys or something else?

Cotillion189, 7 months ago

Yes, Yubikeys.

Delogrand, 8 months ago

I ran into an issue with hardware 2FA enabled and a new phone.

One of my Ubikeys is always plugged into my desktop, the other is on my keychain for wireless authentication with my phone.

Apparently, only the most recently used hardware 2FA is allowed to authenticate wirelessly to add a new device. Since my other Ubikey wasn’t wireless the only recourse was to remove the hardware 2FA, add the phone and then re-add the hardware 2FA.

2xsaiko, 8 months ago

Are you talking about this?

At least two FIDO® Certified* security keys that work with the Apple devices that you use on a regular basis.

I think “the Apple devices that you use on a regular basis” is the part that belongs together.

Showroom7561, 8 months ago

That would make more sense! Kind of.

I don’t have an Apple device that I use on a regular basis. Does this mean that hardware 2FA won’t work?

2xsaiko, 8 months ago

Well, then it means you have nothing to worry about since you don’t have any devices it could be incompatible with.

jard, 8 months ago (edited 7 months ago)

I think you might be overthinking things. “Apple devices you use on a regular basis” just generically means whatever you use and plan to enable hardware 2FA for.

Maybe it’s to emphasize that you’re now going to have to use your hardware keys to regularly use Apple services on your phone, in addition to things like passwords, Face ID, etc.

ndguardian, 8 months ago

Agreed, I think this is what is being suggested.