3 ms·
In addition to using YubiKey's U2F capabilities, I've been using its HMAC-SHA1 challenge-response mode as my password manager (more precisely a password generat
by noliran 8y ago
In addition to using YubiKey's U2F capabilities, I've been using its HMAC-SHA1 challenge-response mode as my password manager (more precisely a password generator) for the past few months.
It uses these 3 to consistently generate a password for websites:
1. A secret that I've pre-programmed in the YubiKey (+ 2 other backup YubiKeys)
2. A "pin code" (either provided by me, or in my case - protected by my TouchID)
3. The website's name
If you want to take a peek, I always appreciate feedback. https://github.com/noliran/ykpass https://github.com/noliran/ykpass