You must log in or # to comment.
Sweet! I myself have been rocking my Yubikey for six years now. 😃
Nice, I also have some. Sadly one of them died.
Love the idea, but I was wondering about their lifespan. Or misplacing/losing it.
I like the software. It was somewhat easier than yubikey.
The questions everybody’s looking for in the comments: What’s this? Why aren’t you using a password?
It’s a security key meant to replace passwords with passkeys, but it does some other things as well.
The main thing which makes them secure is no one can export, read, copy the keys that are inside it, even if the PC is infected.
I also store a GPG key to encrypt / decrypt some sensitive stuff and a SSH key.
You can also use them as OTP replacement instead of using apps like google authenticator, aegis or whatever your choice is. It also makes it more secure. Though I don’t think I will be doing that.
Main thing I bought it was for GPG and to secure my password manager. The good thing is because you have a security key your PIN can be significantly shorter than a password managers password and you don’t sacrifice security. Nitrokey, for example, allows 8 tries to enter the FIDO2 (passkey) PIN. After 8 incorrect attempts it will block it and you will need to do a reset. Also people have to physically have your security key to even enter the PIN. So I simply have a 6 digit PIN code.
Nice, I got one of these too! Using it mainly for 2FA at my workplace, and it works really well. Easy to set up, even for a security noob like me.
Its to store passkeys in a secure enclave if I get it right? With finger print?
Your anus print is also unique. Use that information how you want.
It doesn’t come with a fingerprint scanner. Just have to tap to confirm the log in. Obviously , you set a PIN as well.
Enter the Pin on your PC? Doesn’t that mean it could be read? Crypto safes do pin/unlock on device so just curious
It can be read. But you also have to physically tap the security key to do anything. If they don’t get access to your security key the PIN alone is useless.
Tbh, I find Nitrokey over priced. Token2 is technologically superior (when you only look at the core passkey field) and cheaper - and at least is swiss made. especially as a sensible policy requires more than one token.
