this post was submitted on 30 Nov 2023
31 points (94.3% liked)

Privacy

1254 readers
315 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 1 year ago
MODERATORS
Ategon@programming.dev
danielintempesta@programming.dev
31
What are good YubiKey alternatives with NFC and biometrics? (www.yubico.com)
submitted 11 months ago by g33z@infosec.pub to c/privacy@programming.dev
17 comments fedilink hide all child comments
 

Hey everyone,

I am currently using an old(er) HYPERSECU FIDO key, USB-A with a button, and I am looking to

  • secure my phone as well (NFC) and, if possible
  • add biometric authentication to the mix.

Are there good alternatives or better: upgrades to the YubiKey which do support NFC as well as biometrics and come with a USB-C?

Thanks for your time ๐Ÿ‘‹

you are viewing a single comment's thread
view the rest of the comments
[โ€“] vrek@programming.dev 8 points 11 months ago (2 children)

I know yubikey is the biggest in the market and it's always good to have alternates but is there a reason you don't want them?

I thought their security was pretty good and haven't heard of any breaches.

[โ€“] jbk@discuss.tchncs.de 4 points 11 months ago (1 children)

Maybe their prices

[โ€“] vrek@programming.dev 2 points 11 months ago

I think I paid 35 for USB-c and nfc... You think that is severely overpriced?

[โ€“] dog@suppo.fi 3 points 11 months ago (1 children)

May be similar issue as mine. Yubico has pretty awful on-device password support, but for MFA it works. With yubico you're better off thinking of per-site passphrases that you keep in memory in addition to their one-click password entry, so it gets memory heavy.

[โ€“] vrek@programming.dev 2 points 11 months ago

My main thing is my paaword manager is protected by 2fa...maybe not 100%secure granted, but I am not a state level actor and have no major money/property to steal. That's probably why I have no similar issues.