I run a FreeIPA domain as a hobbyist, basically to get password sync
among my boxes and some services. Right now I'm the sole admin (and
user). I've been toying with the idea of adding 2FA, but I wonder if
there's a good solution if I lose my token.
I guess I can have some sets of printed one-time passwords (one in my
wallet, another at home, another at a bank safe or whatever), but that
could not work well if I'm travelling or something.
I'm thinking having multiple tokens might cover some eventualities, but
I guess there are failure scenarios where all tokens get disabled.
Are there any other strategies?
( Y )
()~*~() mail: alex at corcoles dot net