Yubikey 5 nfc Security key

[koushik401]

Thinking to buy a yubikey is it a good investment for security 

Saying investment cause it's costing like 7k INR and it's not little lol

 

And if anyone can help me finding a trusted place to buy it in India

Thanks 

[SorryBella]

33 minutes ago, koushik401 said:

Saying investment cause it's costing like 7k INR and it's not little lol

if you had to think of it, then its not going to be worth it, especially in the age of phone based 2 Factor Authentication. I personally just go with postpaid plan with ISP that would reject any requests relating to my number without my presence and my ID, and use Google Authenticator.

[RaidonChrome]

I love FIDO2! It makes 2FA way less annoying for a lot of places. 
However, I would suggest looking for other options (they are all compatible).

 

https://onlykey.io 

OnlyKey has FIDO2 support, but it would also house regular password/username combos for you, acting like a keyboard, and even OTP codes.
Usually, I suggest this one to people looking to get their password management under control, because it stores regular passwords for them as well. Really is a one-stop-shop.

 

https://solokeys.com

 

Solo key is cheaper and is only FIDO2 compatible, but it offers NFC and you can plug it both ways into a regular USB. Ths is the one I'm currently using (also I'm a Kickstarter backer for it)

Both are open source.

 

[WereCat]

To be fair you should get at least two in case you lose one so that you won't lose access to what you're getting it for in the first place. 

[RaidonChrome]

Just now, WereCat said:

To be fair you should get at least two in case you lose one so that you won't lose access to what you're getting it for in the first place. 

Oh yeah, one of the cool things about OnlyKey is that it allows backing the whole thing up. So instead of getting two you can just buy another one and restore the backup onto it. 
But honestly, I don't know if this advice about getting two is very practical, every single service I can think of, apart from your encrypted files or databases offers recovery codes in case you can't use your second factor anymore.

[koushik401]

Thanks all will look into all the suggestions