4 ms·
Whenever a 2FA or TOTP article comes out, I ask if anyone knows of a hardware dongle/token/card that can store several TOTP keys so that I can stop using my pho
by saganus 9y ago
Whenever a 2FA or TOTP article comes out, I ask if anyone knows of a hardware dongle/token/card that can store several TOTP keys so that I can stop using my phone for 2FA (e.g. Google Authenticator).
I've only found the Protectimus Slim NFC [0], which would be my ideal solution except it only holds 1 key.
If it could save say, 100 keys (or even 50 maybe?), I would buy 3 or 4 in a heartbeat. It would be great to have stronger 2FA than SMS, but with the peace of mind of not having to worry about the phone.
I'm definitely not a hardware guy, but I can't believe such a solution doesn't exist yet. It doesn't seem like it would be hard to build, right? I mean, you just need a very simple processor, a real-time clock, a display and an NFC module for reprogramming (or maybe micro-usb?).
Does anyone know of any products like the Protectimus but supporting multiple keys?
[0] https://www.protectimus.com/protectimus-slim-mini https://www.protectimus.com/protectimus-slim-mini
- raulpopa 9y agoI know it's not a hardware solution but check out this Chrome extension: https://chrome.google.com/webstore/detail/typingdna-authenticator/gmohoglkppnemohbcgjakmgengkeaphi https://chrome.google.com/webstore/detail/typingdna-authenti... It protects your keys with your typing pattern.
- davchana 9y agoYou can manually save TOTP key in a keepass db on any usb, and even anywhere else too.
- saganus 9y agoYeah, I actually already do that, but it's not the same as having a Google Authenticator in hardware in terms of convenience.
- vel0city 9y agoThe NFC versions of YubiKeys (only the NEO I believe) support TOTP with their app. The model I have supports 28 slots.
- saganus 9y agoI actually own one of those YubiKeys but the issue with needing an app is the portability (or lack of). Ideally I'd love to have a hardware token that I can use for TOTP authentication regardless of the computer I'm working with.