yubico - 添加两个 Yubikey 到 KeepassXC

Question

我正在测试 Yubico Yubikeys 5 NFC，一般来说，我们使用 KeePassXC 来保存敏感信息。 KeePassXC 接受 yubikey 但只接受一个...有人知道是否可以向 kdbx 文件添加多个吗？

Answer 1

在与 KeePassXC 开发团队交谈后，很明显在两个独立的 Yubikey 中拥有两个不同的种子是不可能的。您需要将相同的种子添加到另一个 Yubikey 以保留种子的副本。

In the Docs section, can we read this :

What happens if I break my YubiKey? Can I create backup keys?
    You should always make a copy of the HMAC secret that is stored on the YubiKey and keep it in a secure location. This can be an analog paper copy, but since the YubiKey personalization tool allows you to program a custom secret into the key, you may as well program a second key with the same secret

 
Can I register multiple YubiKeys with my KeePassXC database?
    You can only use a single secret for encrypting the database. So you can use multiple YubiKeys, but they all have to be programmed with the same secret (see question above).

关于如何在两个 yubikey 的插槽 2 中设置相同的 id 的解释如下: https://support.yubico.com/hc/en-us/articles/360013779759-Using-Your-YubiKey-with-KeePass

请记住，在第二个 key 中，您必须复制并粘贴相同的种子

完整的讨论在这里:https://github.com/keepassxreboot/keepassxc/discussions/6344