I am im the market for a hardware key for MFA. I want to put it on my keyring and put it in my pocket so I always have it with me. I guess it should be quite sturdy for that (no easily broken off connectors, …) I mainly want to use it as additional factor for my Bitwarden vault. Do you have any recommendations, experiences, stories? Yubikey seems to be by far the brand most recommended. Solo is nice bc open source hard/firmware, but I care more about reliability and usability than openness I think.
Thank you for your insights!
You must log in or register to comment.
Canokey, there are two way:
- You can buy one Canokey Pigeon, which is close source, but with protection of security chip.
- You can make one Canokey STM32/NRF52, which is opensource, but no security chip protection, so if someone got your key, she can extract the key from it.
Apex Flex if you want to go a bit more off the beaten path. I love mine both for OTP and FIDO2.
hahaha that’s crazy. A bit further than I am willing to go right now. Where do you have yours if you don’t mind me asking?
Right forearm! It also works some places in the hand, but the forearm is the best location for that chip I believe.
that is really cool! i have so many questions! is it visible from the outside? can you still have an mri scan? does the metal detector at airports detect it? can you feel it under your skin?
It’s only visible if you manipulate it with the other hand, otherwise it’s flat enough to be completely in invisible. MRI is fine! The technicians are often somewhat worried but usually accept it just fine if you refer to online documentation. The chip is unaffected. It’s too small to be detected by any metal detectors, so no issues at the airport. You can’t feel it outside of touching it with the other hand. There is a pinching feeling a few weeks after install though but it disappears completely.
I have four; one small glass capsule type in each hand and two flex type in the forearm.
awesome. thank you so much for taking the time to respond!
I have a yubikey on my keychain for a few years now, no problems so far.
Btw, I would recommend to get at least 2, one you use and one as a backup.
Always remember that biometrics can be compelled by the court in the US, but a password cannot.
I would place my trust on the good “not-so-old” Yubikey. I have been using their keys since early 2010s. I have used NEO, 4, and 5 NFC and all of them have been rock solid.
Yup, Yubikey is the way to go. Rock solid hardware, and lots of support.
