Onlykey FIDO2 and password manager?

[Greg_E]

I probably should have asked before buying, but anyone have any experience with the Onlykey FIDO2 and password manager? OnlyKey Hardware Password Manager | One PIN to remember

2 factor is going crazy at work in the next few weeks, and I'm interested in making life easier on me. Hoping that a hardware key like this can make things better than a dozen text message with codes each day.

I do have Windows machines I can use to set it up, that seemed to be one complaint on Amazon. I checked with my bank, and can use the fido2 function as my second factor, as well as it looks like I can secure my windows domain accounts against it too.

Any tips, tricks, or warnings?

 

[BlueFox]

Pretty much anything FIDO2 will work and that specific product is not your only option. Yubikey is arguably the most popular one and what I use personally, including for my job. Just be aware that not everything will support it. I still have some TOTP tokens (one I've been using for 20+ years, predating FIDO), though you can get ones that do both. Of the 3 TOTP tokens I still have, I have some from Token2: TOKEN2 Sàrl is a Swiss cybersecurity company specialized in the area of multifactor authentication. We are a FIDO Alliance member.

Main caveat is that often 2FA like this actually only has the guise of security because third parties may let you bypass it for convenience. A great example is Wells Fargo. If you can have them email you a code if you "forgot" your token as part of the login flow, then you don't actually have 2FA at all.