Nik282000

Totp with a backup of the secrets/seed qr stored in a kdbx. If my phone melts it’s a 24hr problem at most.

The the account is still as vulnerable as a password.

Maintenance at a blast furnace. I am exposed to acidic vapours, caustic vapours, ambient heat in the 60c range, radiant heat in the 1000c range, rock from the nanometer up to 30cm size, phenolic resins, oil mists, and metal powders. And then there’s the crawling around over, under, and between equipment.

Not every tech-savvy person works in an office.

ok.

How do you add a new device to your account without a password or the old device?

I like the idea of a Yubikey but there is no way it would survive more than a month on me due to the conditions where I work. And getting a physical key then not having it on my body at all times is a non-starter.

I keep my keepass .kdbx in on a webdav server and that covers any device I can think of.

How do you transfer your passkey to a new device?

Year of the BSD desktop!

Nah, lock-in is not a safety feature. 16+ random chars are plenty, and if cracking gets better I’ll go to 20 or 30 chars. My pw manager doesn’t care what strings go in it or which device opens it up.

Siemens is a dogshit company. I work with LOADS of their industrial automation equipment, from 1989 S5 PLCs up to brand new 2026 hardware. The newer it gets the more it feels like it is directed by an MBA and designed by an intern, impossibly thin plastic connectors, 24v input cards that over heat, entire product lines that are obsoleted with no direct replacement.

Fuck’em. They are doing the same enshitification dance as the rest of the world.