cross-posted from: https://lemmy.one/post/7807944
Nevertheless I chose my Yubikey instead.
Yubikey on a phone?
this post was submitted on 09 Dec 2023
138 points (96.0% liked)
Privacy
31773 readers
433 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
Yes, it's relatively convenient with NFC.
Yep. Just download the Yubico Authenticator app. Your OTPs wont show up unless you tap your physical Yubikey to your phone's NFC chip.
Only downside is, the Yubico Authenticator only allows 32 accounts. So i have my most important accounts on there.
Any iOS alternatives? Couldn’t find either of these in the App Store.
Bitwarden has been working well for me on iOS. It’s a paid feature though. $10 a year I think
+1, well worth the 10 bucks.
Bitwarden has a 2fa function?i didn't know it. But I don't fully trust online apps for storing passwords though. A server can always be exploited
Bitwarden uses end to end encryption. This severely reduces the risk their infra is attacked. The encryption keys exist on your devices only so it’s impossible to read the server side data.
The only real question is how much you trust Bitwarden as a company. Are they completely lying about E2EE to customers and auditors? If not, then Bitwarden is a good choice.
Oh and ya, it’s has a one time passcode function. Works great! It will even autofill into OTP fields… sometimes 🙂
iOS has terrible choices when it comes to privacy and/or Open source. Apps that put control into the users hands are in direct conflict with Apple, and many times from what I know certain software licenses have issues getting approved there. See if Raivo is still around (may be spelled wrong).
Check out Techlore as well for recommendations across the board, before he went to a Pixel he ran an iPhone for a while and had a decent list of stuff for them IIRC.
You’re right about Apple. I hope the EU will force openness into the ecosystem. I’m also hopeful that open and free alternatives will continue to become more viable in terms of user experience; the switch to Lemmy from Reddit has been mostly painless.
Thanks for the recommendations.
Edit: Raivo is perfect for a dedicated Authenticator app in the Apple ecosystem. I’ll likely pay for Bitwarden instead as I want to support their great product.
I use Authy. Works fine
I reccommend ente auth. privacyguides.org added it a while ago.
Yeah, FreeOTP exports are broken. Can't import them back to FreeOTP, can't import them to another application. I've spent 2 hours writing a script to decrypt the export manually, the resulting codes are not accepted anywhere probably because ciphers are not written to the file properly. I've been going around restoring accounts for the past month. Fuck FreeOTP.