<story><title>AWS now supports U2F/Yubikeys</title><url>https://aws.amazon.com/blogs/security/use-yubikey-security-key-sign-into-aws-management-console/</url></story><parent_chain></parent_chain><comment><author>pg_bot</author><text>While this is a great step forward for U2F adoption, AWS made the same mistake several other online services have made by only allowing a single key per account. The typical U2F user carries at least two keys. (one on their person and one stored securely for backup) I hope they decide to change this because it will cause a ton of customer support problems in their future.</text></comment>
<story><title>AWS now supports U2F/Yubikeys</title><url>https://aws.amazon.com/blogs/security/use-yubikey-security-key-sign-into-aws-management-console/</url></story><parent_chain></parent_chain><comment><author>robbiet480</author><text>Key note: U2F isn&amp;#x27;t currently supported in the API, CLI or mobile apps. Docs are unclear as to what the fallback 2FA is, if there is one. Also, as before, you can only have one 2FA method configured at a time, so say goodbye to your hardware tokens or TOTP configurations for AWS if you switch to U2F.&lt;p&gt;EDIT: &amp;quot;Fallback&amp;quot; is to have root account remove your IAM user 2FA. If root account 2FA is lost they have a few alternative verification options like email or phone call. [1]&lt;p&gt;1: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;docs.aws.amazon.com&amp;#x2F;IAM&amp;#x2F;latest&amp;#x2F;UserGuide&amp;#x2F;id_credentials_mfa_lost-or-broken.html&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;docs.aws.amazon.com&amp;#x2F;IAM&amp;#x2F;latest&amp;#x2F;UserGuide&amp;#x2F;id_credenti...&lt;/a&gt;</text></comment>