2fa hardware security keys recommendations

[D C]

Anyone here using hardware 2fa keys like yubikey, Google titan key etc?
Looking for reviews and recommendations.

My main interest is to have a bit more security for main accounts and also have qr 2fa TOTP codes on the key itself.
(Was using microsoft authenticator, it's backup feature didn't restore my codes after restoring phone and reinstalling app, had to regenerate 2fa qr again for everything)

 

[kuduku]

Cheapest without TOTP codes is 300/ on Amazon to secure accounts etc , quite restricted
Best in the game Yubico
Have both , but both cannot generate TOTP on key itself

 

[D C]

Cheapest without TOTP codes is 300/ on Amazon to secure accounts etc , quite restricted
Best in the game Yubico
Have both , but both cannot generate TOTP on key itself

Which yubikey do you have?
According to this, series 5 can store TOTP on the key(using desktop app or phone app to the key)

https://support.yubico.com/hc/en-us/articles/360013789259-Using-Your-YubiKey-with-Authenticator-Codes

Is the key authentication good enough? What about services which have TOTP but don't support keys.

 

[ishanjain28]

TOTP Autofill via Yubikeys is bit more "involved" then I like. You have to open the app, Unlock the vault and then it'll show you the totp codes. In some cases you can click on the totp entry and it'll autofill it for you or you can copy paste it. Yubikey imitates a keyboard to support TOTP Autofill feature and because of this it doesnt work on all platforms. iOS/ipad os as an example.


Even though its generally not recommended to save TOTP codes in your password manager, I still do it because its just so much more convenient.

I use the HyperFIDO Mini for U2F/Web Authentication. I have been interested in Yubikey 5 nfc because it has nfc but they are pricey at around 5k so I am waiting till black friday sales.

 

[kuduku]

Which yubikey do you have?
According to this, series 5 can store TOTP on the key(using desktop app or phone app to the key)

https://support.yubico.com/hc/en-us/articles/360013789259-Using-Your-YubiKey-with-Authenticator-Codes

Is the key authentication good enough? What about services which have TOTP but don't support keys.

USB-C YubiKey 5C NFC Two-Factor Security Key | Yubico

Protect yourself from account takeovers with the efficient, multi-protocol YubiKey 5C NFC. Go passwordless with our NFC capable security key today.

www.yubico.com

i have 5c NFC USB-C

TOTP Autofill via Yubikeys is bit more "involved" then I like. You have to open the app, Unlock the vault and then it'll show you the totp codes. In some cases you can click on the totp entry and it'll autofill it for you or you can copy paste it. Yubikey imitates a keyboard to support TOTP Autofill feature and because of this it doesnt work on all platforms. iOS/ipad os as an example.


Even though its generally not recommended to save TOTP codes in your password manager, I still do it because its just so much more convenient.

I use the HyperFIDO Mini for U2F/Web Authentication. I have been interested in Yubikey 5 nfc because it has nfc but they are pricey at around 5k so I am waiting till black friday sales.

i also have 2 of HyperFIDO Mini , Main and backup

 

[D C]

USB-C YubiKey 5C NFC Two-Factor Security Key | Yubico

Protect yourself from account takeovers with the efficient, multi-protocol YubiKey 5C NFC. Go passwordless with our NFC capable security key today.

www.yubico.com

i have 5c NFC USB-C

i also have 2 of HyperFIDO Mini , Main and backup

So the TOTP qr cannot be saved on the key? Or it needs the yubikey authenticator app and you are not using it?

TOTP Autofill via Yubikeys is bit more "involved" then I like. You have to open the app, Unlock the vault and then it'll show you the totp codes. In some cases you can click on the totp entry and it'll autofill it for you or you can copy paste it. Yubikey imitates a keyboard to support TOTP Autofill feature and because of this it doesnt work on all platforms. iOS/ipad os as an example.


Even though its generally not recommended to save TOTP codes in your password manager, I still do it because its just so much more convenient.

I use the HyperFIDO Mini for U2F/Web Authentication. I have been interested in Yubikey 5 nfc because it has nfc but they are pricey at around 5k so I am waiting till black friday sales.

I am fine with no autofill, I just want another place to store 2fa qr codes in case I lose or reset my phone.

Let me know if you come across any sale. Prices on Amazon bit too much compared to USD prices.

 

[ishanjain28]

@D C I'll likely buy it from here if it doesn't have good discounts on black friday. https://icons.net.in/product/yubico-yubikey-5c-nfc-security-key/ and I'll import it if if does have discounts.