[Question] Hardware MFA: product reccommendations?
[Question] Hardware MFA: product reccommendations?
I am im the market for a hardware key for MFA. I want to put it on my keyring and put it in my pocket so I always have it with me. I guess it should be quite sturdy for that (no easily broken off connectors, ...) I mainly want to use it as additional factor for my Bitwarden vault. Do you have any recommendations, experiences, stories? Yubikey seems to be by far the brand most recommended. Solo is nice bc open source hard/firmware, but I care more about reliability and usability than openness I think.
Thank you for your insights!
I would place my trust on the good "not-so-old" Yubikey. I have been using their keys since early 2010s. I have used NEO, 4, and 5 NFC and all of them have been rock solid.
Yup, Yubikey is the way to go. Rock solid hardware, and lots of support.
Thank you for the explanation. I wanted to not just buy the most popular thing from the near monopoly brand, but I really only read good things about the yubikey 5 series. At the moment I think I am veering towards buying that.
I have a yubikey on my keychain for a few years now, no problems so far.
Btw, I would recommend to get at least 2, one you use and one as a backup.
Always remember that biometrics can be compelled by the court in the US, but a password cannot.
So I guess a password for the law, and a hardware key for the lawless haha.
I havent used it, but solokey is built on open hardware and FOSS if i remember correct
Apex Flex if you want to go a bit more off the beaten path. I love mine both for OTP and FIDO2.
Nitrokey or OnlyKey is you want FOSS are good options.
Thank you for the recommendations. Any first hand experience with these brands? I am looking mainly for reliability and durability. Otherwise they look quite good, maybe even a bit overkill for me with all the extra features.
No, but Nitrokey is well known and time tested at this point. And they have different models, so I'm sure you can find something that works for you.
Canokey, there are two way:
- You can buy one Canokey Pigeon, which is close source, but with protection of security chip.
- You can make one Canokey STM32/NRF52, which is opensource, but no security chip protection, so if someone got your key, she can extract the key from it.
Apex Flex if you want to go a bit more off the beaten path. I love mine both for OTP and FIDO2.
Apex Flex if you want to go a bit more off the beaten path. I love mine both for OTP and FIDO2.