Suggested Feature: Ability to use hardware keys to recover a 1password account
Currently to recover you need your
-
Email
-
Master password
-
Secret Key (the 34-character code printed on your Emergency Kit)
What I think should be allowed is we could use a Secret Key like now, or a hardware key like Yubi-key which allows us to recover our account if something ever happened.
So you go on a new computer, do the email thing and master password, it will ask you for the code or key. And you can put in the secret key or the hardware key, and you’re back in.
In my opinion this might be a better option for some because I have no doubt a good number of users are storing their recovery key in not safe locations like a cloud service or other things because that’s all they have. Or maybe they don’t know not to. Where giving the user the ability to use a hardware key. For someone to break into the account they could use the setup a new device feature, or they need the hardware key. Like they need to already be in the account, or they need a physical hardware.
meaning it does downgrade the security at all, but it has more than less the same level of security other than you can’t keep the hardware key on a cloud service and it is a lot easier to store a hardware key.
