I am im the market for a hardware key for MFA. I want to put it on my keyring and put it in my pocket so I always have it with me. I guess it should be quite sturdy for that (no easily broken off connectors, …) I mainly want to use it as additional factor for my Bitwarden vault. Do you have any recommendations, experiences, stories? Yubikey seems to be by far the brand most recommended. Solo is nice bc open source hard/firmware, but I care more about reliability and usability than openness I think.
Thank you for your insights!
You must log in or # to comment.
I would place my trust on the good “not-so-old” Yubikey. I have been using their keys since early 2010s. I have used NEO, 4, and 5 NFC and all of them have been rock solid.
Yup, Yubikey is the way to go. Rock solid hardware, and lots of support.
Thank you for the explanation. I wanted to not just buy the most popular thing from the near monopoly brand, but I really only read good things about the yubikey 5 series. At the moment I think I am veering towards buying that.
I have a yubikey on my keychain for a few years now, no problems so far.
Btw, I would recommend to get at least 2, one you use and one as a backup.
Apex Flex if you want to go a bit more off the beaten path. I love mine both for OTP and FIDO2.
hahaha that’s crazy. A bit further than I am willing to go right now. Where do you have yours if you don’t mind me asking?
Right forearm! It also works some places in the hand, but the forearm is the best location for that chip I believe.
that is really cool! i have so many questions! is it visible from the outside? can you still have an mri scan? does the metal detector at airports detect it? can you feel it under your skin?
It’s only visible if you manipulate it with the other hand, otherwise it’s flat enough to be completely in invisible. MRI is fine! The technicians are often somewhat worried but usually accept it just fine if you refer to online documentation. The chip is unaffected. It’s too small to be detected by any metal detectors, so no issues at the airport. You can’t feel it outside of touching it with the other hand. There is a pinching feeling a few weeks after install though but it disappears completely.
I have four; one small glass capsule type in each hand and two flex type in the forearm.
awesome. thank you so much for taking the time to respond!
Always remember that biometrics can be compelled by the court in the US, but a password cannot.
So I guess a password for the law, and a hardware key for the lawless haha.
I havent used it, but solokey is built on open hardware and FOSS if i remember correct
Nitrokey or OnlyKey is you want FOSS are good options.
Thank you for the recommendations. Any first hand experience with these brands? I am looking mainly for reliability and durability. Otherwise they look quite good, maybe even a bit overkill for me with all the extra features.
No, but Nitrokey is well known and time tested at this point. And they have different models, so I’m sure you can find something that works for you.
Canokey, there are two way:
- You can buy one Canokey Pigeon, which is close source, but with protection of security chip.
- You can make one Canokey STM32/NRF52, which is opensource, but no security chip protection, so if someone got your key, she can extract the key from it.
Apex Flex if you want to go a bit more off the beaten path. I love mine both for OTP and FIDO2.
Apex Flex if you want to go a bit more off the beaten path. I love mine both for OTP and FIDO2.
