3 ms·
Too late, Google, I already switched to Yubikey. I kind of like that my TOTP keys are a separate entity from my phone.
by fullstop 3y ago
Too late, Google, I already switched to Yubikey. I kind of like that my TOTP keys are a separate entity from my phone.
- bombolo 3y agoIf only that was more broadly supported.
- fullstop 3y agoWhere is it missing support? edit: I want to reiterate that these are still TOTP codes and not WebAuth/FIDO2.
- bombolo 3y agoOh I thought you meant those usb devices that need to be set up, like google titan and similar.
- fullstop 3y agoAh, no, these can connect to a PC over USB and to a smart phone over USB or NFC to generate a 6 digit TOTP code, just like Google Authenticator does. They can also do more sophisticated things, but that's not what I was referring to here. Those sophisticated and more secure things are supported by Google, Facebook, Dropbox, Github, etc, but not by most banks. Banks are so slow with this stuff and still do SMS-based 2FA which is absurd to me.
- jve 3y agoYesterday was trying to pay with PayPal (protected by hardware key/yubikey) via Android and it said: Supported on desktop only... And another thing: https://www.paypal-community.com/t5/Managing-Account/Why-am-I-only-allowed-to-create-one-security-device-for-2-factor/td-p/2920679 https://www.paypal-community.com/t5/Managing-Account/Why-am-...
- fullstop 3y agoRight, this still has to do with WebAuthn/FIDO2. PayPal can not tell if I am using Google Authenticator or if I am using Yubikey TOTP. I would absolutely love if more services supported WebAuthn/FIDO2, of course, but Yubikey TOTP is supported everywhere Google Authenticator is.
- stronglikedan 3y agoYup, I'd rather pay Bitwarden a nominal fee and be able to authenticate everywhere, than deal with the incredible amount of unnecessary friction google has imposed since forever. Never going back.