TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Ask HN: 2FA hardware?

17 点作者 MTemer将近 9 年前
Right now I&#x27;m using Google Authenticator and I manage the services manually on my smartphone.<p>I use 2FA for my e-mail accounts, VPS, games and more. But it feels really silly to have it on my phone. Specially since I use 2FA for my phone e-mail account.<p>Is there any specialized hardware that I could use to replace this setup? Something that is compatible with any service and doesn&#x27;t require a phone or a computer? Like a standalone solution.

7 条评论

nikolay将近 9 年前
Everybody recommending Yubikey: because this [0], use that [1] instead. Amazon uses Gemalto [2] for AWS MFA, but I&#x27;ve had bad experience with it, and cannot recommend it.<p>[0]: <a href="https:&#x2F;&#x2F;plus.google.com&#x2F;+KonstantinRyabitsev&#x2F;posts&#x2F;4a7RNxtt7vy" rel="nofollow">https:&#x2F;&#x2F;plus.google.com&#x2F;+KonstantinRyabitsev&#x2F;posts&#x2F;4a7RNxtt7...</a><p>[1]: <a href="https:&#x2F;&#x2F;www.nitrokey.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.nitrokey.com&#x2F;</a><p>[2]: <a href="http:&#x2F;&#x2F;www.gemalto.com&#x2F;" rel="nofollow">http:&#x2F;&#x2F;www.gemalto.com&#x2F;</a>
realtarget将近 9 年前
You could use any kind of hardware token like RSA, Fortinet or many other manufactors. The usually offer a software version four your desktop as well. But usually you&#x27;ll hate this additional piece of crap in your pocket. The combination of something in your mind (password) and something in your hand (smartphone) is the optimal setup. If you have a password or fingerprint to unlock your phone and the token generator app for 2FA it should be enough security.
Relys将近 9 年前
I use the <a href="https:&#x2F;&#x2F;www.yubico.com&#x2F;products&#x2F;yubikey-hardware&#x2F;yubikey-neo&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.yubico.com&#x2F;products&#x2F;yubikey-hardware&#x2F;yubikey-neo...</a>.
h4waii将近 9 年前
One option might be something like a Pebble. I use mine for H&#x2F;TOTP codes just fine =&gt; <a href="https:&#x2F;&#x2F;github.com&#x2F;JumpMaster&#x2F;QuickAuth" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;JumpMaster&#x2F;QuickAuth</a>. It&#x27;s always with you and works completely offline and outside of any service.<p>It still requires your phone to add seeds, but they are generated completely independently once seeded. Just an idea that doesn&#x27;t require buying specializes single-task hardware.
dpc_pw将近 9 年前
Google: Yubico ; the NFC-enabled version has a Google Authenticator-like app (Yubico Authenticator)
评论 #11782520 未加载
emocin将近 9 年前
Yeah, we use Yubico yubikey nanos at work for ssh 2fa as well as gmail 2fa. It&#x27;s pretty nice.
评论 #11782709 未加载
mike-cardwell将近 9 年前
I use my Pebble Time smart watch. I press one button on my watch and it instantly displays a list of 2FA codes for a bunch of sites.