Someone in the mobile Linux community modified my Librem Key USB smart card LUKS unlock script to also work for mobile. I tweaked it so now it can also use the built-in Librem 5 smart card reader. Now I have 2FA disk unlock on my Librem 5!
@kyle But then one should definitely have two cards (one in the phone and one for backup at home), because loosing the card would be the end for all your data on the phone, wouldn't it?
@zwarf In general it's good practice to backup your GPG keys in offline storage so you can restore them, but even in the case you didn't, after 90 seconds this falls back to your regular disk unlock passphrase. That way you can select a much stronger passphrase that would otherwise be inconvenient to type each time you boot.
@kyle OK yes that's true.
Ah OK that's nice to have this fallback. Awesome work, thanks!