4 ms·

What I'd like to have is a TOTP hardware device that can store multiple keys. Even though U2F is much more secure, it seems like the adoption is a bit slow, un

What I'd like to have is a TOTP hardware device that can store multiple keys. Even though U2F is much more secure, it seems like the adoption is a bit slow, unlike TOTP which is broadly supported in my opinion. However using TOTP with e.g. Google Authenticator makes it a pain when you lose/reset your phone, and it's harder to share, for example for administration of certain services at a company (say Heroku). If I had a chance to buy a multi-key TOTP hardware device I could enable it on every service and then give the administrators one of the devices. So yeah, ideally I'd prefer broader U2F support, but in the meantime I'd love a multi-key TOTP device, which I haven't been able to find unfortunately. Closest thing I know about is the Protectimus Slim NFC [0], but I would to need to buy two of them for each service, which gets expensive and unwieldy very fast. [0] https://www.protectimus.com/protectimus-slim-mini https://www.protectimus.com/protectimus-slim-mini

johnmaguire2013 9y ago
Authenticator Plus for iOS and Android supports encrypted backup of TOTP tokens to Dropbox and Google Drive. I imagine some other products do as well.
- saganus 9y ago
  Yeah, there are definitely workarounds, but I'd rather have a hardware device than a phone, in particular so I don't have to ask employees/administrators to load stuff on their phones.
ianburrell 9y ago
Yubikey Neo can store multiple TOTP keys. Have to use Yubico Authenticator app to load or read them on Android phone through NFC. There is also desktop app for USB.
- saganus 9y ago
  I was not aware of that and it does sound like a solution. However I'd love to have a hardware device that I don't need an app to use. To load the keys and configure it I have no problem with, but to actually read the TOTP it would be great if I could just click a button and read a display instead of having to use extra infrastructure. Kind of like my 2FA token for my bank, which just requires me to push a button and that's it. Thanks for the tip though.

johnmaguire2013 9y ago

Authenticator Plus for iOS and Android supports encrypted backup of TOTP tokens to Dropbox and Google Drive. I imagine some other products do as well.

saganus 9y ago
Yeah, there are definitely workarounds, but I'd rather have a hardware device than a phone, in particular so I don't have to ask employees/administrators to load stuff on their phones.

ianburrell 9y ago

Yubikey Neo can store multiple TOTP keys. Have to use Yubico Authenticator app to load or read them on Android phone through NFC. There is also desktop app for USB.

saganus 9y ago
I was not aware of that and it does sound like a solution. However I'd love to have a hardware device that I don't need an app to use. To load the keys and configure it I have no problem with, but to actually read the TOTP it would be great if I could just click a button and read a display instead of having to use extra infrastructure. Kind of like my 2FA token for my bank, which just requires me to push a button and that's it. Thanks for the tip though.