When HN users recommended it
5 HN users recommended this between 2014 and 2015, in 5 comments.
20072026
Each tall tick is one HN user's first recommendation. A short tick is the same user again. Click a tick to jump to the comment.
5 HN users recommended this between 2014 and 2015, in 5 comments.
Each tall tick is one HN user's first recommendation. A short tick is the same user again. Click a tick to jump to the comment.
The (expensive) Yubikey Neo Nano already supports U2F in the 'micro key' form-factor:
http://www.amazon.com/Yubico-Y-110-YubiKey-NEO-n/dp/B00O8ST7...
Hopefully they'll come out with a cheap U2F only nano-key soon.
Don't keep it on the same keychain as your car keys. I don't–that would be terribly impractical. Instead, it lives in my laptop slipcase.
Even better, get the nano version and leave it in your USB slot permanently: http://www.amazon.com/dp/B00O8ST7MM
Unless you don't click "Remember this computer for 30 days" and log in every time, 2FA isn't protecting you from stolen computers.
Security key protects you from phishing and someone on the Internet guessing your password.
(Many security keys are designed to be permanently installed in your computer, like this one: http://www.amazon.com/Yubico-Y-110-YubiKey-NEO-n/dp/B00O8ST7...)
This is actually more convenient sometimes. I already have one of these FOBs permanently attached to my computer. It's a tiny pieces that fit into usb and only protrudes a couple of milimiters. Since I have this always connected all I have to do is touch it and I'm in. Takes me less than once second while taking my phone, opening the app and typing the code by hand takes 10-20 seconds.
The downside is that it takes a USB port, which is one of the reasons I hated this years MacBook so much.
UPDATE: I found the exact model I have on Amazon
http://www.amazon.com/Yubico-Y-110-YubiKey-NEO-n/dp/B00O8ST7...
Yubikey has a "always available" form factor if you're already bringing your laptop to work in the neo-n: http://www.amazon.com/Yubico-Y-110-YubiKey-NEO-n/dp/B00O8ST7.... It just lives in your USB port.
The user experience is also better with U2F than previous 2FA systems. When GitHub prompts you for U2F, you press the yubikey and are instantly logged in. No typing random numbers with n seconds, no fake keyboard.
YMMV of course, but if you've tried U2F, it feels incredibly slick.