I can see a benefit here, being able to remove the keys from the GPG keyring and putting them on a hardware device. If I want to encrypt a single file here and there, I do so with GPG using ECC keys. Maybe I will get a benefit here, although it depends upon how many SSH keys I can store on the Yubikey 5 NFC.įinally, I make use of Veracrypt and Cryptomator to encrypt multiple files.
I have setup Fail2Ban, changed SSH port numbers and have SSH keys for a couple of the hosts. Use the two-step login authentication option to confirm the sign-in process, e.g. Most of them are on my internal home network, my NAS and Raspberry Pis. Type or paste the email address, or confirm it if 'remember email' was selected previously. Therefore I won’t get that gain from the Yubikey either. To access your vault using a YubiKey: Log in to your Bitwarden vault on any app and enter your email address and master password. I have a Nitrokey FIDO2 key, which I have linked to various sites that support FIDO2 and FIDO U2F. go to Yubico API key signup and obtain a key pair. Therefore I won’t benefit from a Yubikey giving me TOTP codes for 2FA. Inside that KeypassXC database, for better or worse, I have my TOTP data and get my TOTP codes direct from KeypassXC. The drives in that array are encrypted at rest using LUKS. My passwords are kept in a Keypass XC database, stored on a separate NAS running Unraid. I never use Windows except for gaming so view the chances of a malware/man in the middle attack as reduced.
I am considering whether or not to get a Yubikey 5 NFC whilst I like the idea of having a hardware key such as the Yubikey, I am not sure whether I will get the benefit from it in my use case or not - so putting it out there for people to offer their views and the Yubikey faithfull to convince me!
0 kommentar(er)
