2FA

[Arthur777]

Hello, I'm having a bit of trouble understanding the two methods of double authentication, namely recovery keys and WebAuth. From what I understand, the recovery key can be used to disable two-factor authentication (2FA) for a specific user, is that the only purpose? As for WebAuth, I don't quite grasp the principle, how its works.
If you could illuminate me further, I would greatly appreciate it

 

[Folke]

Hi,
the recovery keys are meant as a backup mechanism if your primary two-factor procedure is not possible for some reason. It's a list of keys that you can only use once. Usually you would store that list somewhere safe and encrypted and only access them as your last resort.
WebAuthn on the other hand, is used with security tokens like a Yubikey [0], NitroKey [1], or a Smartcard. The security tokens usually require you to touch them to proof that you are sitting at your computer and that it is not an attacker remote controlling your PC.

[0] https://www.yubico.com/
[1] https://www.nitrokey.com/

 

[Arthur777]

great, thank you