(24-08-2015, 07:15 PM)October Wrote: I've heard about yubikeys, they've interested me. Will probably get one later on and mess with it.

Was interested by a yubikey as well. I won one few weeks ago during a CTF, and it is in my laptop case since then... I have been using keepass for years and I don't really have the motivation to change it. It fits my needs so far.

Two factor authentication is a plus, but only big services support it, and except Github, I don't like them. I want to be able to connect to my Github account on my (no so smart)phone, therefore I don't use two factor auth here.

I don't want to use for ssh auth for servers I can't physically access (basically my main server hosted on OVH where the highest level of security is applied), because it is too easy to screw up and lock the server forever. Experienced it on my laptop and fixing it has been a pita.

Don't know if you guys are using a yubikey on a daily basis, but I would be interested to know some useful application for this device. Should take some time to investigate. I like this little thing and it is a good enhancement in security, just needs a bit of configuration (lazy guy here). I use the same thing at work and it is very useful, to unlock keepass database or decrypt computer for instance. It also contains a certificate to encrypt mails. However, if you forget it, you're screwed.