#yubikey

Are there good yubikey alternatives that are in a credit card form factor? Ideally something very cross platform friendly.

Something that holds cryptographic keys and can answer TOTP challenges, ideally.

#yubikey #cybersecurity #linux #android #windows

Nextcloud sicher nutzen: Überblick über Weboberfläche, Clients und essentielle Sicherheitsfunktionen wie 2FA, starke Passwörter und Freigaben.

Teil 3 der Artikelserie »Nextcloud«.

https://www.kuketz-blog.de/nextcloud-nutzen-grundfunktionen-apps-und-schutzmechanismen-nextcloud-teil-3/

#nextcloud #2fa #passwort #sicherheit #security #yubikey #nitrokey

Nextcloud sicher nutzen: Überblick über Weboberfläche, Clients und essentielle Sicherheitsfunktionen wie 2FA, starke Passwörter und Freigaben.

Teil 3 der Artikelserie »Nextcloud«.

https://www.kuketz-blog.de/nextcloud-nutzen-grundfunktionen-apps-und-schutzmechanismen-nextcloud-teil-3/

#nextcloud #2fa #passwort #sicherheit #security #yubikey #nitrokey

I'm betting the answer here is "this isn't possible" but if anyone knows how to tell OpenSSH that when it's enumerating pubkeys it should check which of the two known authentication dongles is actually plugged into the computer, and only prompt me to unlock the SK key that belongs to that dongle, not both of them, please tell me how.

#openssh #yubikey

Explain #passkeys to me like I'm your grandparents.

#2fa #authentication #security #fido #webauthn #fido2 #otp #yubikey #password #auth

Does anyone have experience with either #Yubikey, #Nitrokey or any other hardware security token for both #MFA/#2FA as well as #encryption via #PGP/#GPG or #SMIME?

In particular, I am looking at the Nitrokey 3A NFC. As far as I can tell, Yubico only sells #MFA tokens(?), unless the YubiKey 5 FIPS Series can hold encryption keys as well?

Both price and open hardware aspect definitely speak for Nitrokey, but I do not know anyone who owns such a token... Anyone who I can talk to?

j2k25 - OpenBSD Hackathon Japan 2025 (rsadowski@) https://www.undeadly.org/cgi?action=article;sid=20250601104254 #openbsd #hackathon #j2k25 #development #kde #kdeapps #yubikey #freesoftware #libresoftware

TIL that Pure Storage issues YubiKeys branded with their logo!

(eBay, not my listing:)

https://www.ebay.com/itm/135898756327

Interesting: Just over the side of the logo, the phrase "NO NFC" is seen (not sure if an add-on label, or part of the logo). NFC-enabled keys ship with NFC disabled by default until first power-up (and can be re-disabled in ykman -R / --restrict option):

https://www.yubico.com/getting-started/

... so I'm not sure if this means NFC is permanently disabled, but it seems likely. Will update when I get one.

#YubiKey

Fuck #Authy. Fuck it in it's stupid ass. They got rid of the desktop version. Fine. It sucks, but I could deal with it. Then they dropped support for #GrapheneOS. Meaning I'm locked out of everything. Luckily I have a #YubiKey so I can get into most things. I guess it's time to move to something else.

I realized I didn't wear #yubikey on chain on my neck for 8 days (because of circumstances). And this is absolutely record for me, it was never so long until now!
Does it mean I have a problem?

I have it on me now. I couldn't feel so... naked? without armor? anymore.

#nerd #MagicalThinking

Mein Nitrokey 3A Mini ist jetzt innerhalb von eineinhalb Jahren zum zweiten Mal defekt und ich bin froh, seit dessen ersten Ausfall immer einen Yubikey als Backup bei mir zu haben...

#Nitrokey #Yubikey

I have to say that I find it almost funny how broken the #yubikey fido2 /webauth is now after passkeys have started to be a thing. Was just trying to use it on the https://demo.yubico.com/ and the loops and amount of errors I see with popups appearing in front of me and talking about passkeys when it's nothing of the sort... And just keeps failing to authenticate... I mean I'm sure I've tried it before on this android phone using the chrome browser and it worked .

Very happy to finally be able to use my yubikeys on my phone (GrapheneOS, without Play services)

Most of the pieces were already there, it only missed to be assembled into a Credential Provider, which is finally done with HW Fido2 Provider

#fido2 #passkey #yubikey #android

@Linux there are 3 big options you forgot that I know of which too ain't under #Cloudact aka. have no subsidiary/office/parent company in the #USA:

@monocles (email, messaging, managed #nextcloud hosting)
@Stuxhost (eMail & @nextcloud )
@nitrokey (a better alternative to @yubico / #Yubikey)

And for #PasswordManagers, there's also #Enpass for those that don't like #KeePassXC / #KeepPassDX / #KeePass and for organizations there's even #Passbolt as a centrally manageable solution. All of these allow #SelfCustody & #SelfHosting on-premise.

Did you know you can manage resident #Passkeys on your #YubiKey or other #Fido2 key with just your web browser?

In Chrome:
–Open the settings screen
–"Privacy and Security"
–"Security"
–"Manage Security Keys"
–"Sign-in data"

Or you can put chrome://settings/securityKeys in the nav bar.

@maexchen1 @scuba_zeus @vowe Stimme ich voll zu. Mich nervt mittlerweile auch das sämtliche banken bei denen ich bin eine App benötigen für den Login. Ich mein, warum eigentlich? Ich will keine Banking App auf dem Handy. Wenn der normale Login unsicher ist, dann bietet halt #Passkeys an oder die Unterstützung von #yubikey. Das sind gesetzte gesicherte Standards, muss doch nicht jeder seine eigene App Entwickeln die benötigt wird zum Banking. Als Option gut und schön, aber doch nicht als Pflicht.

Mein #yubikey wird in #keepassxc nicht mehr erkannt bzw erkannt aber nicht mehr gelesen.

#PCSC läuft. Hab das auch nochmal neu installiert. Aber hat nichts gebracht.

Hat jemensch eine Idee wie ich das fixen könnte?
#eh22

@LimeSurvey The new #2FA with #YubiKey doesn't work well in combination with @1password and the auto submit feature. Why didn't you implement #WebAuthn?

Hat jemand Erfahrung wie lange man z.B. #yubikey als #passkey Verschnitt wo lagern kann?

Oder leiden die unter Flash typischen Alzheimer wenn man die zu lange lagert?

Hat jemensch schon einmal das Login der Schweizer Behörden (AGOV-Login, siehe https://www.agov.admin.ch/de) mit einem Nitrokey 3 getestet und kann etwas zur Kompatibilität sagen?

Geht das oder braucht es "zwingend" einen Schlüssel von Yubico oder Token2 (beide mit L2-Zertifizierung)?

Solo2-Schlüssel gehen jedenfalls nicht und die sind wohl eh EOL. Ich möchte gerne einen Schlüssel mit einer Open-Source-Firmware benutzen.

@nitrokey #nitrokey #agov #yubikey #schweiz #OpenSource #securitykey