3 ms·
Ask HN: Physical device for 2FA auth
Hi,
I'm ditching my personal phone in favor of the company's phone, but I'm struggling to do it due to the fact the I have more than 10 2FA tokens being generated by Google Authenticator on my personal phone.
I don't want to carry two phones, neither do I want to install it on the company's phone (since it could be taken away from me in a blink of an eye).
I though about getting a physical device dedicated for the solely purpose of having all my 2FA tokens only to find that there's no such thing (not that I could find).
What I did find are USB keys that are only good for one service. It's kinda impractical (not to say expensive) to have one physical device per service that I use 2FA. Also, not very usable since it depends on a USB connection to activate the 2FA and they don't spit a number.
How do you guys manage this? Any universal multi-2FA solution that won't rely on a phone?
- theunamedguy 10y agoIn a shameless plug for myself, I recently worked on an open-source side project for digital audio players (a.k.a. "MP3 players") that handles the client end of a 2FA system. This form factor offers several advantages over a phone: first, some devices can automatically type your 2FA code by posing as a HID device, and second, some devices support hardware AES which makes it difficult to clone your tokens. It's been merged into the Rockbox project: http://rockbox.org http://rockbox.org
- tucaz 10y agoIf I understood it well than an idea is for me to get one of the supported players, install rockbox and use it as 2FA? It sounds neat.
- theunamedguy 10y agoYes, exactly. It's called the "otp" plugin.