Hacker News Reader

Comment by ryanklee | Hacker News Reader

I don't need my YubiKey just at work. I need it with me all the time regardless of whether I am even wearing clothes.

OK, I'll bite, where are you logging in naked? Some eyes wide shut situation?

Because in my day to day life wearing clothes is not a prerequisite for interacting with technology. I frequently exercise. This requires many showers and many changes of clothes. I walk around in the morning just wearing my boxers for the first hour of the day or the last hour of the night. This isn't exactly abnormal behavior. I always have my phone around but always having my phone plus always having my YubiKey is a step up in difficulty and not a linear one. Any successful auth solution better be prepared to solve such behavioral issues or they won't ever reach sufficient adoption levels.

You could put it on a chain around your neck. I don't know the specifics of your situation if that's feasible. Also how often do you have to use 2FA? I've been using hardware keys for a few years. I have one plugged into my dock and one in my backpack. Which seems to be enough. So far I haven't been caught off guard.

> This isn't exactly abnormal behavior

The exercise and showers maybe, but feeling like you need your yubikey with you literally 24 hours a day certainly is. I use them extensively and with everything properly set up perhaps need it a couple of times a week at best. Having it on a keychain or in a backpack is fine.

Hate to say "you're doing it wrong" but you (or your company) certainly seem to be doing something wrong to have this level of hassle. No-one would use them if they were this much trouble.

Certainly interested in hearing what I might be doing wrong.

Maybe this is a cultural difference but I can't imagine why I would need to sign into something while naked.

Please see my reply to sibling comment.

Reply on news.ycombinator.com