Restrict Login by Unique Phone IDs

Device IDs can be used for a variety of purposes, including tracking users and analyzing app engagement.

I want to restrict login to my devices by a unique ID like below.
LastPass offers this.

Phones have multiple unique identifiers, including:

  • International Mobile Equipment Identity (IMEI)

A 15-digit number that’s unique to each phone and remains the same throughout its life. It’s used by cellular providers and application developers. You can find the IMEI on the back of the phone or by dialing *#06#.

  • International Mobile Subscriber Identity (IMSI)

A unique number associated with a phone’s SIM card. It doesn’t change, even if the SIM card is put into a different phone.

  • Media Access Control (MAC) address

A unique 48-bit address assigned to each device on a network.

  • Android ID

A 64-bit number that’s unique to each Android device. It’s generated and stored on the device’s internal storage.

  • Advertising ID

A 64-bit number that’s unique to each Android device for advertising purposes. It’s generated by Google Play services.

  • Serial number

A 10 to 16-digit number that’s unique to each Android device. It’s printed on the back of the device or can be found in the Settings app.

  • IDFA

An eight digit code followed by a dash and three sets of four digits. It’s used on iOS devices.

  • GAID

An eight character code followed by a dash and three sets of four digits. It’s used on Android devices.

iOS: The IDFA is an eight digit code followed by a dash and three sets of four digits. Since the introduction of ATT, users can op…

There are ways to deal with a lost phone, etc… The other SSO apps have overcome this challenge, so I see no reason BW can’t do it, too.

So you want only to login if a device has the same serial number?

Isn’t 2FA for logging in better in case you lose the device?

2FA can be hacked. People can social engineer and steal your phone number.

They can’t steal your phone hardware identifier.

Also requiring Yubikey.

If I lose my own phone, backup codes from BW work.

Well, FIDO2 as 2FA is very phishing-resistant and not so easily hacked.

Yeah, that’s true (especially the first part, I guess). - I don’t know for every point on your whole list… but at least I know, a MAC address can be changed / “faked” as well…

I don’t understand what you want to say by that.

Whoops.

Also requiring Yubikey to login on a new device is mandatory for security. (imho)

The yubikey is how you can authorize your new phone when the old gets lost and you block that IMEI.