Yubi
this post was submitted on 20 Oct 2025
38 points (100.0% liked)
Privacy
42733 readers
983 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 6 years ago
MODERATORS
Yubico keys. Never had an issue after years of dangling on my keychain. They get replaced with upgrades to the key before they can break.
Yubico is industry standard for a reason. The current 5 model will have all the features you need and they are basically indestructible.
The firmware isn't open source and I only chose it for the employee discount, but the blue Yubico security key has held up well over hundreds of uses and several years jingling around in my keychain.
6 FIDO keys in one.
That's cool, strange I didn't stumble over it when I was searching for these keys. Have you got one? Is it durable?
I got one years ago. Used it for quite a bit. Worked great, but I stopped using it when my daily computer didn't have a USB-A port any more.
You do have to remember what each numbered button is for.
Why do folks seem to prefer Yubikey over alternatives like Nitrokey or Token2?
So far nobody provided a good answer (if I missed it, I apologized, please do share) so I'm going to assume it's the typical "Nobody ever get fired for buying from IBM" mindset, namely rely on what is the most popular, confirm it works well while ignoring viable alternatives IMHO, e.g NitroKey.
I’m going to assume it’s the typical “Nobody ever get fired for buying from IBM” mindset
That's pretty much it exactly. Yubico has the required features, are widely supported, and are widely used. They have a track record of reliability.
Other viable alternatives definitely exist, but they don't have the same real-world penetration. The disadvantage with that is if you run into a platform-specific issue, finding someone who has had the same issue before and posted the solution somewhere becomes far less likely.
if you run into a platform-specific issue
Well that's of course possible but in theory (which is so different from practice, I get that) if it relies on protocols or specifications rather than vendor specific implementations, e.g. OTP, TOPT, HOTP, U2F, OpenPGP, WebAuthN, etc then it should be fine.
That the same thing I asked myself...
The one I have on me. Which happens to be my Yubikey currently.
Do you mean TOTP? FIDO? Or what? FOSS ones exist but they might not do exactly the right thing. I've had some ideas for self-built too. What would you do on the host interface side? Wouldn't you want the host to not have the secret?
It's an interesting question.
I would use it for FIDO2 authentication
I use Yubikey 5C NFC. You can get it for ~29€ last time I checked.
i stopped using mine because i kept accidentally trigger it every single time i intended to type something.
i was a software engineer at the time, so it was particularly annoying to me.
I have a nitrokey which works great. Only downside is the software isn't as user friendly, you need to set it up using the cli.
I am fine with a cli, I use arch btw.
How long have you had your nitrokey? Others are concerned about their durability...
Have you ever had a yubikey?
Others are concerned about their durability…
Unless I see reports about keys premature end of life I'd put that under FUD.
Anyway as you did ask few times about this I believe it's important, and you might be aware of this so apologies if sound condescending, to see keys as something NOT precious. Of course keys are important and they are not cheap... but also you might, in fact :
- you probably will loose keys
- you might get them stolen (typically by mistake, somebody taking your entire backpack)
- you maybe could break them sitting on them (really tricky but OK, why not)
- you might have some die of "old age" (I've never seen that but physical tear does happen, depends on your usage)
... so what's IMHO crucial is to have a backup. If you lose your 1 key and you are locked out of your stuff, this is terrible. If you lose your key but you have a backup in a well known to you and secure location, then you login, revoke the other one, move one. Maybe you lost 50 bucks but that's much better than either being compromise or hours and hours lost in trying and failing to find back the 1 key.
TL;DR: keys are important but not precious. If they are precious you are doing something wrong.
Edit: also not for now but keys will inexorably deprecate. You might want post-quantum schemes and even though it is arguably not pressing at the moment maybe the hardware you currently have will not support this. So again, keys are important but should be disposable and replaceable.
I've only had the nitrokey for a few months, so can't comment on the durability yet.
I did have a yubikey before. My experience with them wasn't great, I often had to re-plug in the key because the touch to activate thing was pretty unreliable for me, often just not responding to touch at all.
Though ultimately the reason I chose nitrokey is because I was just looking for a European alternative.
I use Yubikey Bio and NitroKeys.
Edit : to expand a bit, for the YubiKey it's for the convenience of just pushing my thumb on. I use it on the Web and to su locally. For NitroKeys I've discovered them via https://nlnet.nl/project/Nitrokey-3/ and thus appreciate the OSHW side, e.g https://certification.oshwa.org/de000007.html or https://certification.oshwa.org/de000008.html