Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Support for U2F security keys

blog.1password.com

Post reply on HN
Print view View original

91–100 of 164 posts

Re: Support for U2F security keys

#91

Post by the_svd_doctor »

charlietango92 wrote: post #78

only tangential, but I've wanted to carry my Yubikey on my keyring, but have always been nervous about making it unreadable by sullying the contacts. Should I be concerned about this? Where do you all carry them?

I've had a "blue" Yubikey (the one around 20$) on my keyring for 2.5 years. Still works like a charm. Very robust stuff.

Re: Support for U2F security keys

#92

Post by iscrewyou »

euroclydon wrote: post #61

So this works with 1Password the website? I've been using 1Password for years, and never go to the website? How does this make my life better? Can I unlock 1Password the desktop app with the U2F key?

> So while it works great as your second factor in those browsers, for now you’ll still need an authenticator app set up to use with the 1Password desktop and mobile apps (and any unsupported browsers).

Re: Support for U2F security keys

#93

Post by burntsushi »

stingraycharles wrote: post #88
saltminer wrote: post #82

Earlier quoted context omitted.

I keep an extra Yubikey in my bank box, next to my other backup keys. The only account I'd be locked out of is Twitter since they only let you add 1 token (my primary).

AWS also only allows you to add a single device, much to my annoyance. I still haven’t found a solution for that, that doesn’t involve risking getting locked out.

AWS at least lets you sign in using alternative methods if you get locked out: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credenti...

Re: Support for U2F security keys

#94

Post by judge2020 »

evo_9 wrote: post #64

I switched recently to Bitwarden. 1Passwords pricing/subscription changes was the the push I needed. Bitwarden has been fantastic, I highly recommend it. https://bitwarden.com

Same, but decided not to use the TOTP feature so that the password manager isn't a single point of failure.

Re: Support for U2F security keys

#95

Post by sorum »

evo_9 wrote: post #64

I switched recently to Bitwarden. 1Passwords pricing/subscription changes was the the push I needed. Bitwarden has been fantastic, I highly recommend it. https://bitwarden.com

$2.99 per month is too steep of a price to pay for your personal security? Really? I'd dump my Spotify/Apple Music/Netflix/whatever in a heartbeat, if I had to choose between paid subscriptions in my life

Re: Support for U2F security keys

#97

Post by remus »

charlietango92 wrote: post #78

only tangential, but I've wanted to carry my Yubikey on my keyring, but have always been nervous about making it unreadable by sullying the contacts. Should I be concerned about this? Where do you all carry them?

I've had mine on a keyring for 6 months and it hasn't shown any signs of wear. I'd be surprised if it doesn't last at least another 18 months.

Re: Support for U2F security keys

#98

Post by AGKyle »

euroclydon wrote: post #61

So this works with 1Password the website? I've been using 1Password for years, and never go to the website? How does this make my life better? Can I unlock 1Password the desktop app with the U2F key?

Our implementation of 2FA only happens when adding your account to a new device. Subsequent unlocks do not require any sort of 2FA except for certain conditions.

Our apps do not currently support U2F/WebAuthn when signing in, so they'll default back to TOTP based until we implement support for U2F. We aren't making any promises as to when this will arrive but at least two of our apps now have some form of support for it internally. It's far from complete and not ready for users but it is being worked on.

Note that U2F in this case is only about authentication, not decryption of data. This is why it's only used on initial setup of your account on a new device. The cryptography side for unlocking 1Password is entirely independent of U2F/MFA.

Hope that helps but let me know if you have any questions.

Kyle

1Password

Re: Support for U2F security keys

#100

Post by PStamatiou »

zippergz wrote: post #81
bitskits wrote: post #76

Earlier quoted context omitted.

Not sure when you last checked, Vanguard supports up to 4 security keys.

Oh, great news, thanks for letting me know!

I just think Vanguard doesn't let you fully disable SMS though right? (but I only checked like a year ago..)
Post reply on HN