TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Ask HN: 2FA hardware?

17 pointsby MTemeralmost 9 years ago
Right now I&#x27;m using Google Authenticator and I manage the services manually on my smartphone.<p>I use 2FA for my e-mail accounts, VPS, games and more. But it feels really silly to have it on my phone. Specially since I use 2FA for my phone e-mail account.<p>Is there any specialized hardware that I could use to replace this setup? Something that is compatible with any service and doesn&#x27;t require a phone or a computer? Like a standalone solution.

7 comments

nikolayalmost 9 years ago
Everybody recommending Yubikey: because this [0], use that [1] instead. Amazon uses Gemalto [2] for AWS MFA, but I&#x27;ve had bad experience with it, and cannot recommend it.<p>[0]: <a href="https:&#x2F;&#x2F;plus.google.com&#x2F;+KonstantinRyabitsev&#x2F;posts&#x2F;4a7RNxtt7vy" rel="nofollow">https:&#x2F;&#x2F;plus.google.com&#x2F;+KonstantinRyabitsev&#x2F;posts&#x2F;4a7RNxtt7...</a><p>[1]: <a href="https:&#x2F;&#x2F;www.nitrokey.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.nitrokey.com&#x2F;</a><p>[2]: <a href="http:&#x2F;&#x2F;www.gemalto.com&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.gemalto.com&#x2F;</a>
realtargetalmost 9 years ago
You could use any kind of hardware token like RSA, Fortinet or many other manufactors. The usually offer a software version four your desktop as well. But usually you&#x27;ll hate this additional piece of crap in your pocket. The combination of something in your mind (password) and something in your hand (smartphone) is the optimal setup. If you have a password or fingerprint to unlock your phone and the token generator app for 2FA it should be enough security.
Relysalmost 9 years ago
I use the <a href="https:&#x2F;&#x2F;www.yubico.com&#x2F;products&#x2F;yubikey-hardware&#x2F;yubikey-neo&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.yubico.com&#x2F;products&#x2F;yubikey-hardware&#x2F;yubikey-neo...</a>.
h4waiialmost 9 years ago
One option might be something like a Pebble. I use mine for H&#x2F;TOTP codes just fine =&gt; <a href="https:&#x2F;&#x2F;github.com&#x2F;JumpMaster&#x2F;QuickAuth" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;JumpMaster&#x2F;QuickAuth</a>. It&#x27;s always with you and works completely offline and outside of any service.<p>It still requires your phone to add seeds, but they are generated completely independently once seeded. Just an idea that doesn&#x27;t require buying specializes single-task hardware.
dpc_pwalmost 9 years ago
Google: Yubico ; the NFC-enabled version has a Google Authenticator-like app (Yubico Authenticator)
评论 #11782520 未加载
emocinalmost 9 years ago
Yeah, we use Yubico yubikey nanos at work for ssh 2fa as well as gmail 2fa. It&#x27;s pretty nice.
评论 #11782709 未加载
mike-cardwellalmost 9 years ago
I use my Pebble Time smart watch. I press one button on my watch and it instantly displays a list of 2FA codes for a bunch of sites.