Quote:
Even if I didn't have a Yubikey I can still get to my email in two ways: password reset via SMS and, if I didn't have my phone, via a login that doesn't require 2FA.
|
But doesn't having a backup via SMS and/or email defeat the purpose of the Yubikey? Can't hackers just use the backup methods too?