This isn’t strictly a privacy question as a security one, so I’m asking this in the context of individuals, not organizations.

I currently use OTP 2FA everywhere I can, though some services I use support hardware security keys like the Yubikey. Getting a hardware key may be slightly more convenient since I wouldn’t need to type anything in but could just press a button, but there’s added risk with losing the key (I can easily backup OTP configs).

Do any of you use hardware security keys? If so, do you have a good argument in favor or against specific keys? (e.g. Yubikey, Nitrokey, etc)

  • haui@lemmy.giftedmc.com
    2·
    9 months ago

    Okay, thanks for elaborating. My vault is also on my home network only with an insanely long password.

    But since someone tried breaking into my network recently I felt like I might need to harden up a bit.

    In a professional environment I would obviously be much more paranoid but my home server is for tinkering so I dont expect perfection.

    I would like a better setup for the vault and otp though. Like, if I store the admin otp key in the vault, I would be unable to retrieve it and get admin access which is bad. Theoretically, I could just store it in an encrypted file with the password stored in the vault.

    But I‘m not sure if that is best practice. With my backups I try my best for 3-2-1 backups procedure so I‘d love to make it easy and reproducible for myself.

    Long text, sorry. Thanks for reading.