4 ms·
That works for TOTP 2FA on your phone. But most hardware tokens have an internal seed that's immutable.
by chipsa 6y ago
That works for TOTP 2FA on your phone. But most hardware tokens have an internal seed that's immutable.
- mimimi31 6y agoIsn't that just the enterprise ones? I've been using personal hardware TOTP tokens[1][2] like this for years, where you can set the seed yourself using NFC. [1] https://www.token2.com/shop/category/programmable-tokens https://www.token2.com/shop/category/programmable-tokens [2] https://www.protectimus.com/protectimus-slim-mini https://www.protectimus.com/protectimus-slim-mini
- antoinealb 6y agoI think they meant hardware in the sense of U2F tokens like Yubikeys, not TOTP based ones.
- x0x0 6y agoThe problem with totp is it's really just a second password. It eg doesn't protect you from phishing in the way that a yubikey does.