Skip to content

Authenticator app vs Hardware Token

0

If I register MFA to use an Authenticator app, can I either change it later to use a Passkey or Hardware token? Or, can I add multiple methods?

asked 2 years ago586 views

2 Answers
1
Accepted Answer

Yes, you have flexibility in managing your Multi-Factor Authentication (MFA) methods with AWS. You can change your MFA method or add multiple methods for enhanced security and convenience.

When you initially set up MFA using an authenticator app, you're not locked into that method permanently. AWS allows you to modify your MFA settings later on. You can switch to using a passkey or a hardware token if you prefer.

Moreover, AWS supports registering multiple MFA devices for a single user. In fact, you can register up to eight MFA devices of any combination of the supported types for each AWS account root user and IAM user. This means you can have a mix of authenticator apps, passkeys, and hardware tokens associated with your account.

Having multiple MFA devices registered provides several benefits:

  1. Redundancy: If one device is lost or inaccessible, you can use another to access your account.
  2. Flexibility: You can choose the most convenient method depending on your situation.
  3. Enhanced security: Using different types of MFA methods adds layers of protection.

For example, you could have a virtual MFA device (authenticator app) on your smartphone for everyday use, a hardware token kept in a secure location as a backup, and a passkey for convenient access across your devices.

It's worth noting that while you can add or change MFA methods, AWS recommends maintaining strong security practices. If you decide to switch from a non-syncable FIDO2 hardware security key to a syncable passkey, consider your organization's security requirements, as hardware security keys provide the highest level of security assurance for customers with strict regulatory or security needs.

Remember, whichever MFA methods you choose, the goal is to enhance the security of your AWS account by requiring multiple forms of verification for access.
Sources
AWS Multi-factor authentication in IAM - AWS Identity and Access Management
Passkeys enhance security and usability as AWS expands MFA requirements | AWS Security Blog
Multi-factor authentication for AWS account root user - AWS Identity and Access Management

answered 2 years ago

EXPERT

reviewed 2 years ago

0

my devices has been hijacked by my ex girl i know this because the day i was trying to have her help me get my phone off the mode that factory resets it she got on amazon and i was like stop procrasinating but whole time she was doing alot of clicking but wasnt fixing the problem then gone tell me she dont know how to do it and i belive she got even more info off my phone and im moving back to Mississippi and i believe she is currently still and will be on my device messing with me because shes miserable. including my Window 11 laptop ive gone through replacing 4 Iphones i need a Specialist she listens to my conversations over the phone she able to watch what i do on my devices as well as move, delete corrupt my emails delete data shes taken my main icloud and lies about it shes evil and shes always on here studying this sh*t she should be banned from this site her name is Jyothi Michaels (9 7 8-8 6 6-78 5 9 is her phone number she has a restraining order on her and shes going against it PLS HELP

answered 9 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.