Hacker News new | ask | show | jobs
by growse 4412 days ago
I use a YubiKey NEO which has the ability to store multiple TOTP tokens on it. You have to arse around with it first and install a jar to the token to give it that capability (I remember it's all official from YubiKey, they just don't ship the keys with that capability).

Then, I simply NFC it to my Android phone, and the YubiKey neo app shows the 2FA tokens for all the secrets on that key. You can also password encrypt the key, so that someone can't just steal the key off you.

Adding new secrets is also easy, I just scan the QR with the app, touch the key to the phone, give it a name and it's added.

I've got around 12 TOTP secrets on there, works very well.

1 comments

That is kind of an annoying workflow; I'd strongly prefer something with a display and input vs the neo. (I tried using the neo as a pgp card, too, and just switched to the pgp cards)
It's maybe a little silly, but there are J2ME implementations you can stick on a candy bar phone.