  Hardware security keys undoubtedly have advantage for users as "usability"
pain is trivial compared to the maximum "security" gain in authentication.
Naturally, the hardware factor in the authentication received a widespread
adoption amongst average users, as it is ergonomically less demanding than
phone texts or authentication prompts. This ergonomic advantage in particular
is essential for users who are blind or low vision, as their interaction with a
phone is impractical. However, the "usability" for low vision or blind users
pain might be much higher than an average well-bodied user for the same
"security" gain. In an effort to learn more we conducted a usability assessment
with ten low vision or blind users setting up the OnlyKey two-factor
authentication key. First, the setup process was insurmountable for more than
half of the participants, resulting in a situation where the hardware key was
abandoned. Secondly, the lack of tactile orientation led participants to
consider it as both impractical, and prone to difficulties locating or loosing
it. We discuss the implications of our findings for future improvements in
usable authentication for visually impaired users.
