Hacker News Reader

Comment by ecesena | Hacker News Reader

I fully agree.

My biggest regret today is that there’s not a 2nd device that I almost always have with me for doing 2FA. Watch may become that, or maybe there’s a future for jewelry.

View on HN

Yubikey?

https://www.yubico.com/product/yubikey-4-series/#yubikey-4

> I almost always have with me

Any security key, it's something else I have to carry around. I'm doing it now, but I regret it's an extra device with no other purpose.

Also, yubikey, as much as I like them for various reasons, don't work with iOS. I recently wrote about this wrt Google Advanced Protection Program: https://hackernoon.com/googles-advanced-protection-program-w...

Yup. I use mine all the time. Have two for home and on the go use.

I think Authy has a version of their app for the Apple Watch. Not sure how it works in practice, but you should be able to use it for 2FA on websites as you'd expect. Of course, it probably still depends on your phone, like most Apple Watch stuff seems to.

Speaking of authentication and watches, I like the approach Apple uses, where it stays unlocked until it stops sensing a pulse, and then requires the passcode again. So it's convenient as long as you're wearing it, but it locks up when it's taken off.

I use Authy and LastPass all the time on my Apple Watch. It's really an incredible experience to have all of my digital identity on my wrist.

I use Authy, but the same exact app is running also on my phone (and it's needed to sync the accounts). This means that it's not really another device.

Also, totp can be phished in principle. I'd very much like a fido/u2f device.

QuickAuth [0] is one of the primary reasons I use a Pebble, though Android Wear and Apple Watch are good devices you can use T/HOTP generators on too.

0. https://github.com/JumpMaster/QuickAuth

It'd be great to see fido/u2f implementations or devices.

Reply on news.ycombinator.com