Option to "Remember This Device" for Hardware Security Keys (FIDO2/WebAuthn)
Option to "Remember This Device" for Hardware Security Keys (FIDO2/WebAuthn)
Description:
Please add an option to trust or fingerprint a device after a successful hardware security key login, rather than requiring it for every single login session.
Under this alternative configuration, the physical security key would only be requested when a user attempts to log in from a new, unrecognized device or browser. Once the key is verified, that specific device is trusted.
To ensure the account remains highly secure, the security key should still be strictly required as a step-up authentication layer for high-risk, sensitive actions, including:
• Changing the master password
• Removing or modifying multi-factor authentication (MFA) settings
• Accessing or exporting recovery phrases/keys
This would dramatically improve daily usability and convenience while still preventing unauthorized remote access from new devices.