3 ms·
Does anyone have any suggestions for a physical token that they can use for both WebAuthN and gpg signatures? Would be great to hear stories from people who ha
by er4hn 5y ago
Does anyone have any suggestions for a physical token that they can use for both WebAuthN and gpg signatures?
Would be great to hear stories from people who have put the equipment "through its paces" so to say :)
- Latty 5y agoI use a Yubikey for this (4C specifically), works well.
- killingtime74 5y agoYubikey?
- rendaw 5y agoI use a Trezor, only for stuff like this. I use it for WebAuthN, gpg, ssh, (and via gpg) password management. Unlike Yubikey you can import an externally generated seed so you can replace a Trezor if it gets lost/breaks without registering multiple devices.
- shoghicp 5y agoI use a Ledger for U2F/WebAuthn/GPG/SSH. Works pretty well, you can have multiple entities from a single seed. You only have to backup that seed (which can have attached passwords), and it can be recreated across any compatible device (Ledger, or Trezor, or even decode them manually)
- dwaite 5y agoYubikeys are good for this, as the higher end models typically support extra functionality beyond FIDO/WebAuthn, like PIV modes.