home.social

#securitykey — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #securitykey, aggregated by home.social.

  1. Hardware keys are the gold standard for MFA — our latest guide breaks down the best security keys and how to use them. Read more: wix.to/KYgRL1o

    #MFA
    #SecurityKey
    #InfoSec
    #Privacy

  2. 👀 I’m part of the 0.5% Twitter’s users that use a #SecurityKey for 2FA. Do we know how much people are using this feature in #mastodon ? From: @SpyBlog https://mastodon.social/@SpyBlog/109884411127070890 [Originally posted: 2023-02-18 07:20 UTC]

  3. Hello Hello!
    #SecuX Tech, a Taiwanese business that produces security devices, sent me a security key, the PUFido Clife Key to unbox, and since I was there, I also make a #tutorial and an explanation of what it is.

    youtube.com/watch?v=JLNijRxZZV
    #PUF #securityKey #unboxing #cyberSecurity

  4. Hello Hello!
    #SecuX Tech, a Taiwanese business that produces security devices, sent me a security key, the PUFido Clife Key to unbox, and since I was there, I also make a #tutorial and an explanation of what it is.

    youtube.com/watch?v=JLNijRxZZV
    #PUF #securityKey #unboxing #cyberSecurity

  5. Hello Hello!
    #SecuX Tech, a Taiwanese business that produces security devices, sent me a security key, the PUFido Clife Key to unbox, and since I was there, I also make a #tutorial and an explanation of what it is.

    youtube.com/watch?v=JLNijRxZZV
    #PUF #securityKey #unboxing #cyberSecurity

  6. Hello Hello!
    #SecuX Tech, a Taiwanese business that produces security devices, sent me a security key, the PUFido Clife Key to unbox, and since I was there, I also make a #tutorial and an explanation of what it is.

    youtube.com/watch?v=JLNijRxZZV
    #PUF #securityKey #unboxing #cyberSecurity

  7. Hat jemensch schon einmal das Login der Schweizer Behörden (AGOV-Login, siehe agov.admin.ch/de) mit einem Nitrokey 3 getestet und kann etwas zur Kompatibilität sagen?

    Geht das oder braucht es "zwingend" einen Schlüssel von Yubico oder Token2 (beide mit L2-Zertifizierung)?

    Solo2-Schlüssel gehen jedenfalls nicht und die sind wohl eh EOL. Ich möchte gerne einen Schlüssel mit einer Open-Source-Firmware benutzen.

    @nitrokey #nitrokey #agov #yubikey #schweiz #OpenSource #securitykey

  8. ⏰ While 2024 is reaching the finish line, we‘d like to take a moment to thank everyone who is supporting us on our mission to secure the digital life. 🛡
    We‘re truly grateful for having such loyal customers. 🙏

    We wish you happy holidays! 🎄
    May 2025 be the year we all wish for! 💪
    Stay secure! 🙂

    #nitrokey #cybersecurity #staysecure #nitrokeypro #opensource #internetsecurity #securitykey #usbkey #secureyourdigitallife

  9. ⏰ While 2024 is reaching the finish line, we‘d like to take a moment to thank everyone who is supporting us on our mission to secure the digital life. 🛡
    We‘re truly grateful for having such loyal customers. 🙏

    We wish you happy holidays! 🎄
    May 2025 be the year we all wish for! 💪
    Stay secure! 🙂

    #nitrokey #cybersecurity #staysecure #nitrokeypro #opensource #internetsecurity #securitykey #usbkey #secureyourdigitallife

  10. ⏰ While 2024 is reaching the finish line, we‘d like to take a moment to thank everyone who is supporting us on our mission to secure the digital life. 🛡
    We‘re truly grateful for having such loyal customers. 🙏

    We wish you happy holidays! 🎄
    May 2025 be the year we all wish for! 💪
    Stay secure! 🙂

    #nitrokey #cybersecurity #staysecure #nitrokeypro #opensource #internetsecurity #securitykey #usbkey #secureyourdigitallife

  11. ⏰ While 2024 is reaching the finish line, we‘d like to take a moment to thank everyone who is supporting us on our mission to secure the digital life. 🛡
    We‘re truly grateful for having such loyal customers. 🙏

    We wish you happy holidays! 🎄
    May 2025 be the year we all wish for! 💪
    Stay secure! 🙂

    #nitrokey #cybersecurity #staysecure #nitrokeypro #opensource #internetsecurity #securitykey #usbkey #secureyourdigitallife

  12. I don't know who needs to hear this, but put an AirTag on that key ring of FIDO2 security keys you have.

    #passkey #fido2 #securitykey

  13. 🔒 Secure your online accounts with SoloKeys! 🔑
    Open-source security keys built with Trussed®.
    Works with Google, Facebook, Twitter & more.
    Get yours now:

    solokeys.com/

    #SoloKeys #SecurityKey #TwoFactorAuth #FIDO2 #OpenSource

  14. Does anyone know of a bank that lets you use a Fido2 security key to authenticate?

    My bank only allows SMS based 2FA, so my fiat can all be stolen by any employee of my phone company at any time.

    #2fa #security #fido2 #securityKey #yubikey #passkey #bank #fido #webauthn #auth #authentication

  15. PassKeys seem like a bad idea. Google backs them up to the cloud, so if your Google account is compromised then all your private keys are compromised. I don't see how that's an improvement over password+2FA at all.

    Now security keys I get; keep the private key on an airgapped device. That's good. Hell I even keep my 2FA-OTP salts on a YubiKey.

    #passkeys #fido2 #webauthn #yubikey #2fa #otp #authentication #cryptography #security #passwords #passkey #password #securityKey #google

  16. When implementing #WebAuthn on an Identity Provider's side. Where exactly should one draw the line between #SecurityKey and #Passkey? I see that most platforms make a distinction between those. Can anyone link me some article or blog post on this topic? If I were to implement security key and passkey support on a provider that does not yet support any WebAuthn, should I go down the same route?

    My current assumption is that during passkey registration you'd set "residentKey = required" and "userVerification = required", whereas for a security key you'd set "residentKey = discouraged" and "userVerification = preferred".

    Also, I'm assuming that a security key can also function as a form of #passwordless multi-factor authentication if UV was true during registration AND authentication. Obviously without the neat part of Passkeys where you don't have to manually enter the username.

    #IAM #Authentication

  17. Who here likes hardware-backed end-to-end message encryption, in the browser? Have I got a fun toy for you!

    sneakernetsend.com

    When I first discovered WebAuthn in 2019 I imagined it being used for something like this, but never imagined something like the prf extension enabling true E2EE like this. Everything happens in the browser; there's no server used in any of this because to me that defeated the purpose. I also challenged myself to make a decent UX on top of this because what good is strong encryption if it's not usable?

    For best results make sure you're using Chrome 116 and a recent FIDO2 security key.

    (I'm also trying to figure out how things get noticed on Hacker News, so if you participate over there here's the Show HN, upvotes appreciated: news.ycombinator.com/item?id=3)

    #webauthn #fido2 #securitykey #e2ee #chrome

  18. For decades, users have authenticated on systems with usernames and passwords. This method of authentication has not changed since the beginning of the Internet. As the Internet became a more hostile place and threats emerged, ...

    blog.tinned-software.net/secur

    #security #securitykey #securitykeys #fido #fido2 #totp #passkey

  19. Free USB-A Yubikeys.

    A friend who writes on security topics was given a box of these several years ago to give away and gave me a handful to give to my friends 💁 but for the life of me, I couldn't get anyone to care enough to take them 🤦‍♂️ so they've been sitting in my drawer for almost 4 years. Yubico says they're still secure and useable.

    DM me with a mailing address and I'll send two to you. I've got 18 available. I'll update this when they're spoken for. For newer devices, a USB-A to USB-C adapter is necessary. Only some adapter brands work. I use an Anker brand. Yubico has a list of other known-to-work adapters here: support.yubico.com/hc/en-us/ar

    If you already use a key (yay), one of these can be a backup. Otherwise, you should use two, with one kept in a safe place should you lose your main one.

    #security #DataSecurity #SecurityKey

  20. proton.me/blog/universal-2nd-f

    Proton has a nice beginners guide to Universal 2 Factor authentication, what it is, and why you should use it. in addition to the basics it covers some concepts such as FIDO, FIDO2 and how to use them.

    #FIDO #FIDOU2F #FIDO2 #SecurityKey #Passwordless

  21. @rmondello @urschrei

    that is a differentiation many people do not recognize until now. #fido #explain #passkey #securityKey

    Thy for pointing out that clear.

    Nevertheless… 1 question. Is there a reason why many vendors set security keys ON TOP of Uname / password?
    To me it has not so much value making it more complex?
    Or do I miss something there?

  22. I can now use a Yubi Key to lock my iPhone down even more

    Apple announces physical Security Key support for Apple ID two-factor, new iMessage verification technology 9to5mac.com/2022/12/07/apple-s

    #Apple #SecurityKey #AppleID #TwoFactor #iMessages

  23. New Yubico security keys let you log in with a tap to your USB-C port - Enlarge (credit: Yubico)

    Because of its power delivery, high t... - arstechnica.com/?p=1807565 #physicalsecuritykey #cybersecurity #securitykey #tech