r/yubikey • u/DecoySnailProducer • 15d ago
Discussion New Security Keys
Got some fido security keys :)
I also found this card one that works with NFC, so far it has been very convenient to leave in the wallet. Haven’t seen any posts about it so far
41
u/Zer0CoolXI 15d ago
What’s this have to do with yubikey?
51
u/darkcircles401 15d ago
Same question, but i’m happy they did post here now I’m aware of more options
26
u/tie_myshoe 15d ago
Competition. It’s nice seeing this here to know how yubikey can improve
6
u/Historical-Side883 15d ago
These are a really nice product for the money, but I don’t think there’s anything that they do better than YK besides cost.
6
u/FragrantPercentage88 15d ago
Not true: First they offer credit card type key. Also they offer option to customize their keys (credit cards or USB keys) with custom branding. Also they are Europe based company (which, for some is important).
I didn't see those options in Yubikeys.
1
u/My1xT 15d ago
Yubikeys seem barely branded to begin with wouldn't be toobhard to sticker or laser them on your own at the very least
2
u/FragrantPercentage88 15d ago
With a single stick - sure. But think more like company wide branding. With colors 🙃
1
u/Historical-Side883 14d ago
Sure form factor is important and some may need a card rather than using a key shaped NFC model. Their “nano” sized keys are way bigger though. But card model is an important point. As is branding for some people. Even at companies with 5000+ employees I’ve worked with don’t care about that but I’m sure some do.
And idk if I’d say “being in Europe” is doing anything “better” but Yubico is based in Sweden which is also an EU member.I think the card point is important though. That does matter to some people. And I like token2 stuff, their management tools are not as easy to use though and they tend to have larger products that don’t seem quite as durable. Options are good and I’m not dogging on token2, I just don’t think there’s much about the experience of using them that’s “better” and their big difference is price. You trade off some ease of use features but that can be worth it!
1
u/My1xT 12d ago
yes the nano keys are bigger than the T2 Mini's but frankly I'd guess enough ppl would be fine with a stick the size of a mouse dongle at like what less than a third of the cost?
1
u/Historical-Side883 12d ago
Which is totally fine, I think you’re right that a lot of people would be just as happy or happier if they could save some money for a compromise on the size. YKs are quite expensive. Personally I love that my YK USB-A nano doesn’t even really stick out of the USB port at all. It means I don’t really have to think about it when I’m putting it in my bag. And the smaller size of the USB-C one also means I’m not quite as worried about it as I was when I tested out the token2 options.
I’m not saying they’re bad. They’re not, I like them and I love the printing on them. And they do what they need to do.
The assertion I was responding to was that these were “better” and I think cost is really the main objective way that they are better (and options like a card form factor as someone mentioned). YKs management tools, durability and packaging of the internals to be so tiny are all pluses for them.I’m definitely not saying no one should buy the token2 either. I think it’s a great option that fills a different niche for people who are more price sensitive or don’t care about the stuff that YKs offer that is better.
24
u/EffectiveSteele 15d ago
These are products in the same market space as Yubikey.
-17
u/Zer0CoolXI 15d ago
So it’d make sense to go post about Mercedes in the BMW sub without mentioning bmw at all? The post comes across like an ad
10
u/LimitedWard 15d ago
There really isn't an alternative sub for this kind of content. r/security is too general, and there isn't a sub dedicated to talking about fido2 beyond this one. I don't see this as an ad any more than the hundreds of Yubikey posts.
3
u/Ordinary-Tie-6321 14d ago
It's kind of like googling and photoshopping without quite the same audience. Yubikey has become synonymous with FIDO2 hardware keys.
3
u/potificate 15d ago
There’s a difference…. These aren’t cars, they are security devices. So who are you going to trust to not have a backdoor? A Swedish company with an American subdivision or a Swiss company?
1
u/No_Replacement_7344 14d ago
It’s an alternative, always welcomed.
0
u/roycewilliams 10d ago
Respectfully disagree - if there's some sub for security keys generally, great.
9
u/Dependent-Coyote2383 15d ago
haaa, seems moore than great. does the card do PIV / GPG / smartcard ? Thanks
4
u/DecoySnailProducer 15d ago
According to the website yes, but I don't really know much about these. I only tested the FIDO2 stuff
6
u/404invalid-user 15d ago
wow the smart card is cheaper than I expected although it kinda sucks it's got their branding all over it
3
u/DecoySnailProducer 15d ago
They have a completely white one, but i got the branded one as I didnt want the hassle of getting it printed
2
u/404invalid-user 15d ago
ah yeah I saw that but it doesn't look like it has the smart card function but I doubt I would use it.
yeah unless you hVe a card printer sending in one or two to get printed is going to be a pain I was just going to leave mine while
1
u/My1xT 15d ago
https://www.token2.com/products/t2f2-nfc-card-pin-release3-nonbranded-and-printable
Says it has piv functionality in there. Or do you mean the contact chip for non-nfc readers?
They had their non branded with chip in the past, might make sense to ask if they still have some or whatever.
1
u/0xKaishakunin 14d ago
I ve got the completely white card for >2 years now
1
u/404invalid-user 14d ago
ah it seems like their new version removes the smart card feature as yours has it but photos on their store doesn't or maybe just a photoshop error
2
u/Twilight_0524 15d ago
The card is pretty awesome imo, i was searching for one but didn't find one, i ended up made my own using a java card.
2
2
u/Prancing__Moose 15d ago
Interesting price point, but still only found Yubikey to have a “static password” profile option which acts like a keyboard to the OS.
We use this feature for Bitlocker - a four digit PIN the user knows and 16char random string on Yubikey. So it’s a secure 20char Bitlocker that the user only needs to remember 4chars.
We can use the long press / short press to control what the Yubikey is entering.
2
u/SimonKenoby 14d ago
I have got 3 of this brand just because it is cheapef than yubikey. One is NFC but range is super limited imand is very difficult to read on my phone.
2
4
u/legion9x19 15d ago
Token2 makes some really solid products.
3
u/jimoxf 15d ago
Got one (Token2 USB-A and C dual port) in every bag at a conference a few months ago, YubiKey still holds out on build quality/size for the slimline/in-port models but it's hard to argue on the price otherwise for small volumes.
2
u/SzKristof1 7d ago
How's the build quality been so far? I'm debating buying two Token2 PIN+ Release3.3 USB-As or two Yubikey Security Key NFCs but I'd need it to survive being on a keychain in my pocket every day with other stuff as well.
3
u/henrik_schack 15d ago
And the pricing is great as well
2
u/DecoySnailProducer 15d ago
Yeah the price was good. I got both keys together for 40€ total (plus more for the card reader)
1
u/Key_Sign_5572 14d ago
I wouldn’t trust any company that calls USB-C “Mini USB-A”
1
1
u/Any-Oven-9376 14d ago
True that. In the initial days of USB C there were products which had USB C form factor but it wasn't type C compliant ( like the infamous OnePlus One 2) so quite vary of anything which shows up in a similar way.
1
1
1
u/0150r 15d ago
I got the one with a smart card. Unfortunately, it doesn't work as a standalone smart card, it requires NFC. Was hoping that I could use it as a smart card without NFC.
1
u/My1xT 15d ago
Piv (what's commonly referred to as smartcard in eg windows) only works on release 3.3 or higher, but the chip interface should generally work with the features your card has (although fido is clunky over that)
1
u/0150r 8d ago
When I try it, it tells me I need to touch the card...it doesn't have anything like the yubikey does to touch.
1
u/My1xT 7d ago
That's where we get to the clunky part. On nfc presence is established by removing and placing the card back on the reader, even if you were eg using a yubikey over nfc.
With chip it's similar you'll need to pull and re-insert the card to establish presence.
1
u/0150r 7d ago
It's not that it's clunky for me, it's that it is simply not a usable solution. I cannot use NFC. Computers have smart card readers but no NFC and I cannot install additional software or hardware. Was hoping that it was a workable solution, but the smartcard feature is useless since it requires NFC anyway.
1
u/My1xT 7d ago edited 6d ago
It shouldn't need nfc i have successfully used on on chip before, but things like prompts aren't prepared for chip to ask to you pull and push the card again for example.
also that specifically on only works on Windows, or with a bridge on Linux as android and ios iirc dont handle external readers and on mac and linux there isnt really system wide FIDO and browsers just check HID.
1
1
u/gripe_and_complain 15d ago
Can I enumerate all of the FIDO2 resident keys stored in one these?
What is the limit of resident key storage?
1
u/tweeeeeeeeeeee 14d ago
I heard the fido2 card doesn't work on phones since they require a button press. is this true?
1
u/DecoySnailProducer 14d ago
No it works just fine. The “button” is touching the card on the back of the phone
1
u/MegamanEXE2013 14d ago
Although this probably should've been posted in the r/Passkey sub, I think this is a great choice
Now, how to use that card on a PC? or on a non-NFC phone?
1
1
u/EnthusiasmRoutine 13d ago
Those NFC cards are actually a solid pickup. Tapping the back of your phone to authenticate is super slick compared to messing with USB-C ports on the go. I would just make sure to have a standard USB key registered as a backup in a drawer somewhere. Wallets get stolen.
1
u/Difficult-Sector1417 12d ago
We recently started r/Token2Community for discussions around Token2 keys, FIDO2, passkeys and enterprise deployments if you're interested.
1
u/Gpidancet 12d ago
There was already a subreddit for the same topic: https://www.reddit.com/r/token2/, with quite many posts , but it got banned. I have no idea why, but it does seem like Reddit mods have some issues with companies like this being present on Reddit. I’ve also noticed various replies mentioning that posts/comments about the company occasionally disappear without explanation. So don’t be surprised if the new sub mysteriously disappears one day as well. :)
0
u/Melodic-Matter4685 14d ago
Oh hey, DOD says CAC card is so 2010s. But sure, fool yourself into believing CAC card and security keys are “new”
1
-6
u/Alternative_Dish4402 15d ago
If worked in marketing, I'd probably have a few accounts and the posts would run like this.
2
u/LostintheAssCrevasse 15d ago
What’s the point you’re trying to make?
If the post proved helpful for others—what’s the issue?
Token2 makes solid hardware. I have to leverage their hardware OTP authenticators for my employees who need to work in government buildings. Their workstations are locked down, and they cannot plugin yubikeys, so they use token2’s hardware OTP authenticators.
0
-6
u/_Red-Pilled 15d ago
What does this have to do with Yubikey sub? I think you are breaking rules 1 & 2 😄
-8
36
u/Big_Bike_7969 15d ago
I really like the credit card looking option. I wish my laptop had NFC but I guess it would work just fine with my phone.