[image] YubiKey is still selling old stock with vulnerable firmware YubiKeys are unfortunately still the best option Hey. Why do you say so ? Why don’t you mention Nitrokey ? I am considering getting a security key to set-up a 2FA for my password manager.

Thanks for your answer. [image] anon48875053: I would recommend an OnlyKey: I don’t know if we should discuss this here but I have a few reservations about OnlyKey. Since when is it necessary to have this numpad ? Yubikey and Nitrokey don’t have this and it’s ok, isn’t it ? 2) the key is era…

[image] mangomango: Since when is it necessary to have this numpad ? It’s not necessary, it’s just used to encrypt the secrets using your PIN. [image] mangomango: Yubikey and Nitrokey don’t have this and it’s ok, isn’t it ? YubiKey doesn’t encrypt the secrets, at least as far as I kno…

[image] anon48875053: it’s just used to encrypt the secrets using your PIN what do you refer to with “the secrets” ? The TOTP seeds or the passkeys (I mean the passkeys stored on the security key, idk if they are called passkeys) too ? [image] anon48875053: they might as well just break …

[image] mangomango: Why don’t you mention Nitrokey ? Nitrokey are grifters (see NitroPhone pricing). That, combined with the lack of being tamper-evident, is enough reason for me to avoid them. Yes, upgradeable firmware + open source are massive advantages over YubiKeys, but that’s not enough…

[image] anon48875053: As for equipment, I will leave it up to you to decide if $3000 in equipment is expensive or not. Oh thanks, I did not know. It’s definitely not very expensive. I was more thinking of futuristic equipment capable of hacking Titan chips, possessed by entities like TSMC or…

[image] phnx: Tampering resistance is one of the main selling points of a security key. You can get the same phishing resistance from passkeys stored in a password manager. A security key should make it impossible for the private key(s) to be extracted. There is a reason why “Must use high-quali…

[image] mangomango: Aren’t you exaggerating/misunderstanding the requirement? Does it really matter that the KEY is tamper resistant or is it just important that the HSM is tamper resistant ? Yeah you’re right it is tamper resistant, but being tamper-evident is also important to me and the Ni…

so im confused, is it ok to go with an up to date yubikey? This whole thing of “Yubikey bad” makes me nervous.

Since this thread is about yubikey alternatives: does anyone here have experience with google titan security keys (the “new” ones as in the ones released around the end of 2023)? I only need support for FIDO2 and 250 passkeys storage is more than enough for my needs since I only plan to protect a f…

Best Security Key(s) besides YubiKeys?

Questions

anon48875053 February 11, 2025, 10:01am 2

I have the same question, they’re far from being the best option while being proprietary and blocking firmware upgrades.

It shouldn’t be this easy to open and get access to the internals, so tampering is a huge concern.

I would recommend an OnlyKey:

Open source.
Upgradable firmware.
All your secrets are encrypted against a PIN that you need to physically input using the numpad.
Has brute force protections.

Topic		Replies	Views
Nitrokey 3 (Hardware Security Key) Tool Suggestions	3	1973	January 21, 2024
Security Keys - which one and how to backup them? Questions	4	990	August 17, 2025
YubiKey. Should I purchase it? Questions	21	1932	February 13, 2025
Mention Nitrokey 3A's FIDO2 certification Site Development completed	18	1308	September 15, 2025
SoloKey (Security Key) Tool Suggestions waiting	21	3629	March 10, 2025

Best Security Key(s) besides YubiKeys?

Related topics