Hardware tokens without the ability to disable SMS / email is quite useless.
On the iPhone, with Face ID enabled, I still need to wait for the text. That on its own is incredibly stupid because it is a protected device. To unlock it I had to put in a pin / Face unlock, and for the app I had to do another face unlock.
And I cannot do yubikey on the iPhone. it MUST be sms / call.
7 comments
[ 2.5 ms ] story [ 22.6 ms ] threadOn the iPhone, with Face ID enabled, I still need to wait for the text. That on its own is incredibly stupid because it is a protected device. To unlock it I had to put in a pin / Face unlock, and for the app I had to do another face unlock.
And I cannot do yubikey on the iPhone. it MUST be sms / call.
I agree. On a desktop it's possible to bypass the hardware token and use the SMS which cannot be disabled AFAIU.
> And I cannot do yubikey on the iPhone. it MUST be sms / call.
Huh, did not know that. Not even the nfc version works?