Don't keep it on the same keychain as your car keys. I don't–that would be terri...

PeterisP · on Oct 21, 2014

Isn't this kind of counterproductive? A key use case of 2FA is to keep your accounts secure if your computer is simply stolen.

jrockway · on Oct 21, 2014

Unless you don't click "Remember this computer for 30 days" and log in every time, 2FA isn't protecting you from stolen computers.

Security key protects you from phishing and someone on the Internet guessing your password.

(Many security keys are designed to be permanently installed in your computer, like this one: http://www.amazon.com/Yubico-Y-110-YubiKey-NEO-n/dp/B00O8ST7...)

cdr · on Oct 21, 2014

It's not even 30 days necessarily. I use 2FA on gmail with "remember this device" checked, and I haven't had to sign in for a year or more.

jrockway · on Oct 22, 2014

Is this on Android? That works a little differently than desktop logins.

cdr · on Oct 25, 2014

Nope, desktop browser. As long as I use it regularly, I never get signed out.

fishywang · on Oct 21, 2014

You can revoke that key if your computer is stolen.