binom

[Question] Hardware MFA: product reccommendations?

https://lemmy.world/post/1840640

[Question] Hardware MFA: product reccommendations? - Lemmy.world

I am im the market for a hardware key for MFA. I want to put it on my keyring and put it in my pocket so I always have it with me. I guess it should be quite sturdy for that (no easily broken off connectors, …) I mainly want to use it as additional factor for my Bitwarden vault. Do you have any recommendations, experiences, stories? Yubikey seems to be by far the brand most recommended. Solo [https://solokeys.com/] is nice bc open source hard/firmware, but I care more about reliability and usability than openness I think. Thank you for your insights!

Jul 20, 2023 at 9:22amWeb
Show threadBrikoXJul 20, 2023
Nitrokey or OnlyKey is you want FOSS are good options.
Show threadbinomJul 20, 2023
Thank you for the recommendations. Any first hand experience with these brands? I am looking mainly for reliability and durability. Otherwise they look quite good, maybe even a bit overkill for me with all the extra features.
Show threadBrikoXJul 20, 2023
No, but Nitrokey is well known and time tested at this point. And they have different models, so I’m sure you can find something that works for you.
Show threadshortwavesurferJul 20, 2023
I havent used it, but solokey is built on open hardware and FOSS if i remember correct
Show threadVersionJul 20, 2023

I have a yubikey on my keychain for a few years now, no problems so far.

Btw, I would recommend to get at least 2, one you use and one as a backup.

Show threadTooTallSolJul 20, 2023
Always remember that biometrics can be compelled by the court in the US, but a password cannot.
Show threadbinomJul 20, 2023
So I guess a password for the law, and a hardware key for the lawless haha.
Show threadwrinkletipJul 20, 2023
Apex Flex if you want to go a bit more off the beaten path. I love mine both for OTP and FIDO2.
Show threadwrinkletipJul 20, 2023
Apex Flex if you want to go a bit more off the beaten path. I love mine both for OTP and FIDO2.
Show threadbinomJul 20, 2023
hahaha that’s crazy. A bit further than I am willing to go right now. Where do you have yours if you don’t mind me asking?
Show threadwrinkletipJul 22, 2023
Right forearm! It also works some places in the hand, but the forearm is the best location for that chip I believe.
Show threadbinomJul 22, 2023
that is really cool! i have so many questions! is it visible from the outside? can you still have an mri scan? does the metal detector at airports detect it? can you feel it under your skin?
Show threadwrinkletipJul 24, 2023

It’s only visible if you manipulate it with the other hand, otherwise it’s flat enough to be completely in invisible. MRI is fine! The technicians are often somewhat worried but usually accept it just fine if you refer to online documentation. The chip is unaffected. It’s too small to be detected by any metal detectors, so no issues at the airport. You can’t feel it outside of touching it with the other hand. There is a pinching feeling a few weeks after install though but it disappears completely.

I have four; one small glass capsule type in each hand and two flex type in the forearm.

Show threadbinomJul 25, 2023
awesome. thank you so much for taking the time to respond!
Show threadwrinkletipJul 20, 2023
Apex Flex if you want to go a bit more off the beaten path. I love mine both for OTP and FIDO2.
Show threadCoelacanthusAug 30, 2023

Canokey, there are two way:

  • You can buy one Canokey Pigeon, which is close source, but with protection of security chip.
  • You can make one Canokey STM32/NRF52, which is opensource, but no security chip protection, so if someone got your key, she can extract the key from it.

    • github.com/canokeys

    CanoKeys

    CanoKeys has 22 repositories available. Follow their code on GitHub.

    GitHub