150
What are computer gadgets everyone should own? (lemmy.world)
submitted 2 years ago by to c/asklemmy@lemmy.world
174 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 18 points 2 years ago (2 children)

YubiKey

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 8 points 2 years ago (2 children)

    Wuzzat?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 19 points 2 years ago* (last edited 2 years ago) (2 children)

    It's a hardware authentication key. Kinda like a USB flash drive.

    You know how some services offer multifactor authentication (MFA), also referred to as two factor authentication (2FA)?

    There are typically two types offered: time-based one-time passwords (TOTPs) where you have 30-60 seconds to type in a 6-digit code, and SMS-based where they text you a 4-6 digit code (that also expires within a set time frame).

    With a Yubikey, you gotta plug in the Yubikey into your computer or phone. Or, there are some models that use near field communication (NFC) and you just need to bring it near the device you're tryna authenticate.

    So rather than typing in those codes you get either from SMS or your authenticator app, you use the Yubikey as your authentication method.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 2 years ago (3 children)

    Oh nice ! Thanks for the explanation. Is this type of authentication supported by many apps and services ? Can it completely replace an authenticator app on a phone ?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 6 points 2 years ago

    Not everything supports FIDO U2F (the kind of 2fa that Yubikeys support), unfortunately. That said a lot of your important accounts might. Google supports it, GitHub supports it, Apple supports it. It’s a much stronger form of 2FA, so it’s nice if you can have it.

    Depending on the yubikey you get it may also be able to do PGP so you can keep your keys locked up on it and off your computer so they’re safer. You can use this to encrypt / decrypt things, but also to cryptographically sign emails and git commits. You can also use it for SSH authentication.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 4 points 2 years ago (1 child)

    For services that support fido2 keys, Yes 100% it replaces TOTP apps. Most services do not support fido2 keys. Just services that are very security conscience. Google, Microsoft, GitHub, cloudflare, AWS, azure, anything with a high technical risk surface will support fido2 keys.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •