jakobMay 27
Simon Repp

tl;dr: Dedicated TOTP hardware recommendations anyone?

I'd like to use TOTP-based 2FA for some services that don't support FIDO tokens.

For some time I did this with TOTP applications on another device (laptop or fallback smartphone in the drawer), but found it cumbersome to boot up and shut down an entire OS for every 2FA login.

Therefore, I'd love to get a dedicated TOTP hardware thingy, and am looking for pointers/recommendations! Which one(s) should I look at and why?

May 27 at 6:54pmWeb
Show threaddaniel lublinMay 27
@freebliss what do you use for FIDO2. chances are that hw also can do TOTP?
Show threadSimon ReppMay 27
@quite yubico security key, to my knowledge doesn't do TOTP unfortunately ( ◡‿◡ *)
Show threadjakobMay 27
@freebliss I haven't used any of those, is it fine if I boost this?
Show threadSimon ReppMay 27
@themoep Yes absolutely, happy about a signal boost :)
Show threadChris VogelMay 27
@freebliss I use a nitrokey 3c.
Show threadStefan PfisterMay 27
@chris @freebliss If you need totp what's the use of a nitro key USB stick? You have to use the nitro app? For this purpose I can use some kind of software anyway without a stick which costs 60€.
Show threadChris VogelMay 27

@stepfister @freebliss

I use it for gpg and coreboot+heads anyway.

For otp I use the nitrokey cli client. Otp is secured by a pin and the need to touch the device when I request an otp.

This suits my workflows and I like to use OpenSource.

Show threadGroza DanutMay 28
@freebliss I also have a yubico key and it has TOTP as well. But its not the security key, it's the YubiKey 5C NFC.
Show threadFossman6d ago
@freebliss I think #Nitrokey 3 can do it. They use open source firmware and EU based manufacturing. @nitrokey