Post #2238407

@JensHannemann@mastodon.online @encthenet@flyovercountry.social A Yubikey can store a FIDO2 credential, which is asymmetric. Their default mode programmed into slot 1, Yubico OTP, is a symmetric token based on an AES key. Salted hashes reduce the risk for users who don’t log in while the system is compromised, but if someone has access to the server, they can potentially log the cleartext passwords as users provide them.