3 ms·

Ah yes, I remember seeing this before! This is interesting, because at work pretty much all of our logins (including for third-party services) go through SAML,

Ah yes, I remember seeing this before! This is interesting, because at work pretty much all of our logins (including for third-party services) go through SAML, where our IdPs use Duo for two-step. That gives us similar functionality to this, without needing to use a browser plugin. You do need to use an app, though, to avoid insecure SMS or voice. (Duo does support U2F, but it's not as obvious, because end users have to initiate the setup, and Duo instances that existed before U2F became available have it turned off—instance-wide—by default.) One thing you could do, assuming work uses Duo and U2F support is on: You could have a singly Krypton install for both personal and work (particularly if you have one mobile device). Then, enroll Krypton as your U2F device in Duo. I'm kindof surprised that either Duo or LastPass haven't bought out krypt.co yet…

judge2020 8y ago
> I'm kindof surprised that either Duo or LastPass haven't bought out krypt.co yet… Would be the perfect move for LastPass - around the beginning of this year Lastpass started a beta program for LastPass connect [0], however, was suddenly put on hold [1][2], and I think krypt's technology would be the perfect candidate to pull together the app. I also trust LogMeIn much more than I trust Krypt to not push out malicious binaries, so there's a plus for that. 0: https://www.lp-labs.com/ https://www.lp-labs.com/ 1: https://judge.sh/VBRJP4n.png https://judge.sh/VBRJP4n.png 2: https://www.androidauthority.com/lastpass-connect-861342/ https://www.androidauthority.com/lastpass-connect-861342/