USB Security Key (FIDO-certified)

[mtls2005]

Can anyone, who is currently using one, recommend a make, model and lcoal source for a FIDO-certified USB Security Key.

 

I'm leaning towrds this one...

 

https://www.lazada.co.th/products/yubikey-5-nfc-yubico-account-facebook-twitter-gmail-microsoft-anb-smart-tech-fido2-u2f-i2114018913-s7100922271.html?spm=a2o4m.searchlist.list.4.25c0218buyCEcj&search=1&freeshipping=1

 

 

but would welcome your recommendations on any which work for you currently.

 

 

[OneMoreFarang]

I am not currently using one. But I just checked in the very reliable computer Magazin c't (not an online article).

The device which you have in mind has a very good rating - at least if that it the original device.

But to be fair none of the tested devices has a real bad rating. So it seem even if you don't buy the best one that a simple version still does the job.

[mtls2005]

22 minutes ago, OneMoreFarang said:

So it seem even if you don't buy the best one that a simple version still does the job.

 

Yes, as long as it meets the requirements for those sites where you will use it.

 

 

[mistral53]

I just got this one:

 

https://www.lazada.co.th/products/i344972842-s672508473.html?urlFlag=true&mp=1

 

I suppose I will find out next month whether it works with the new BoA login security requirements.

[grantbkk]

I'm currently shopping for one.  I have no idea how my B of A Safe Pass worked all these years. must be one hell of a battery.

[mtls2005]

7 minutes ago, grantbkk said:

I have no idea how my B of A Safe Pass worked all these years. must be one hell of a battery.

 

Mine died ages ago.

 

I think you can still receive SafePass codes via SMS? 

 

I purchased one today, they seem to be selling quite quickly. 

 

Yubikey 5 NFC USB-A 2,040 baht.

 

I needed it for another application.

 

 

Some recommend getting two in case you lose one.

 

 

 

 

 

 

[grantbkk]

9 hours ago, mtls2005 said:

 

Mine died ages ago.

 

I think you can still receive SafePass codes via SMS? 

 

I purchased one today, they seem to be selling quite quickly. 

 

Yubikey 5 NFC USB-A 2,040 baht.

 

I needed it for another application.

 

 

Some recommend getting two in case you lose one.

 

 

 

 

 

 

Technically I guess if I had a US SIM running here in Bangkok I could get an SMS.

I bought exactly the same USB Security Key from Lazada today. Same price, said only 3 left. Cheers.

[mtls2005]

11 hours ago, grantbkk said:

Technically I guess if I had a US SIM running here in Bangkok I could get an SMS.

 

I receive BofA SMSes on my Google Voice and Talkatone numbers here. Both work for all my 2FA (~ 30-ish) requirements, but another one is changing soon. Also have a T-Mo SIM and UM SIM, which also work.

[grantbkk]

Lazada just delivered the USB Security Key I ordered 25 hours ago. 

[mtls2005]

4 hours ago, grantbkk said:

Lazada just delivered the USB Security Key I ordered 25 hours ago. 

 

Yeah, pretty impressive, maybe 21 hours for me.

 

 

[Siameaze]

mistral 53 have you been able to use yubi security key for BoA?

[mtls2005]

On 6/23/2021 at 3:13 PM, Siameaze said:

mistral 53 have you been able to use yubi security key for BoA?

 

I can confirm that my Yubi key works with BofA.

 

You have to register it first.

 

 

https://www.bankofamerica.com/security-center/online-mobile-banking-privacy/usb-security-key/

 

[sikishrory]

I been look at getting at a yubikey delivered from Amazon because all the ones on Lazada looked a bit suss. I was recently locked out of Google services for signing in on a new device. I never knew they could lock you out even when you put all the correct details and recovery stuff. Almost lost access to thousands of dollars in crypto. So yubikey is one more later to add to recovery options. Google recommend Titan but yubikey looks to be the industry leader

[mtls2005]

Importing an encryption key may run afoul of Thai law, and Thai Customs has been clamping down on imported kit.

 

So I chose to purchase locally. Will these get through? Probably, maybe. The key I bought here, on Lazada from AnB Smart Tech, is legitimate.

 

I think Titan may be Google's own brand name? Not sure exactly.

 

 

For Google/GMail/Chrome best to use 2FA for EVERYTHING. I use the Google Prompts. They also offer: Authenticator/3rd party authenticator apps, Security Key, SMS, Backup Codes. And change your password frequently, and use a unique password not used by you elsewhere.

 

 

[sikishrory]

On 8/30/2021 at 7:54 AM, mtls2005 said:

Importing an encryption key may run afoul of Thai law, and Thai Customs has been clamping down on imported kit.

 

So I chose to purchase locally. Will these get through? Probably, maybe. The key I bought here, on Lazada from AnB Smart Tech, is legitimate.

 

I think Titan may be Google's own brand name? Not sure exactly.

 

 

For Google/GMail/Chrome best to use 2FA for EVERYTHING. I use the Google Prompts. They also offer: Authenticator/3rd party authenticator apps, Security Key, SMS, Backup Codes. And change your password frequently, and use a unique password not used by you elsewhere.

 

 

I just had a closer look at the ones on lazada from anb. At first glance they looked suss with all the thai writing and stuff but closer inspection the seem to be legit with good reviews. I might order one from there tonight.