I’ve been thinking about getting a couple of Yubikeys for a partner and myself, but we share certain accounts. While I would love to have the Yubikey 5 that can store TOTP, that seems like it could be problematic for shared accounts.
Would using the cheaper Yubico Security Keys to unlock Bitwarden Premium vaults, that use a Shared Organization, be a better/more sane option than trying to sync up TOTP secrets every time a new shared account gets added? Any other critiques or suggestions?
It depends. Do you need MFA to access the password manager?
If not, then yes it reduces the effectiveness of having MFA on your accounts but they are still more secure than not having MFA at all.
The password vaults do have MFA already. So they’d still need a password and the upgraded hardware key to get into the vaults.