News for hackers. Stuff that matters.

A comment on Getting the most out of YubiKeys for your business.

Re:Getting the most out of YubiKeys for your business by graton on Thursday June 18, 2020 @12:55AM (#23559909)
One nit about this article. It claims that the Yubikey does not support TOTP (Time-based One Time Code). I believe all of the Gen 5 versions that plug into your computer's USB port support TOTP.

There is an app called Yubico Authenticator that can scan for a QR code on your screen and import the secret key from a website, into the Yubikey, when setting up TOTP as supported by Google Authenticator. You can also require a touch in order to generate the One Time Code, which I would recommend.

[ Parent | on HN ]
Re:Getting the most out of YubiKeys for your business by timothy-quinn on Thursday June 18, 2020 @01:07AM (#23559960)
Oh yeah good point, I always forget about the OATH part of the YubiKeys - unfortunately it's like the OTP feature in that I haven't had enterprise customers asking me about it at all (they're all hyped about U2F), so I start to forget its there.

I'll have to add it in to the article :)

[ Parent | on HN ]