4 ms·
Has anyone tried a Ledger or Trezor device for something like this? Your FIDO U2F private key is deterministically generated [0] based upon your seed phrase, wh
by xur17 4y ago
Has anyone tried a Ledger or Trezor device for something like this? Your FIDO U2F private key is deterministically generated [0] based upon your seed phrase, which you can backup, and restore on other devices.
[0] https://www.reddit.com/r/ledgerwallet/comments/udzx1c/ledger_fido_u2f_app/ https://www.reddit.com/r/ledgerwallet/comments/udzx1c/ledger...
- aaaaaaaaata 4y agoAny input which (Trezor/Ledger) is least likely to be a honeypot?, and/or a good device?
- xur17 4y agoWhat do you mean by a honeypot? Both are pretty well trusted devices, and users easily have tens of billions of dollars deposited on them. Given that, I feel pretty comfortable using them for 2fa.
- lxgr 4y agoAt least Ledger actually does support U2F as an installable application, but that's the predecessor to FIDO and has some weaknesses in comparison. I'm also not sure whether WebAuthN supports legacy U2F authenticators without the browser performing some protocol translation.
- nybble41 4y agoLedger and Trezor both support U2F, which is a FIDO protocol but not the latest version. The Trezor Model T additionally supports FIDO2 (WebAuthn).
- eswat 4y agoI have a Ledger as a backup key. Keyword is backup since it's less convenient to use than a Yubikey due to needing to put in a pincode first. Though that could be a security feature in and of itself.