OnlyKey Reviews and details

Social recommendations and mentions

• ELI5: why is a password that uses numbers and letters stronger than one with only letters? the attackers don't know that you didn't use numbers, so they must include numbers in their brute force either way.

  I haven’t used one, but there’s this: https://onlykey.io/. Source: 11 months ago

• Thetis, Yubikey, Solokey, Nitrokey, Onlykey, etc. Differences and Compatability?

  I might be mistaken but according to this: Https://onlykey.io/ They are FIDO2 certified. Source: 12 months ago

• How to Yubikey: A Configuration Cheatsheet

  I'm with you re: backups. The whole "just have a backup key" methodology seems tediously manual and fraught with opportunities for error/laziness. I've been looking into OnlyKey[0] recently. It seems to have sensible backup functionality at least. Using something The Mooltipass[1] (USB HID password vault w/ TOTP support that has a sensible backup strategy) comes closest to what I want, but not quite close enough.... - Source: Hacker News / about 1 year ago

• Secretive: Store SSH Keys in the Secure Enclave

  I think the other (IMO completely valid) concern is that you don't know what the Yubikey does, really. The protocols are open source, sure, but how sure are you there aren't back-doors in them? The firmware tends to be closed source, I found https://onlykey.io/ but I can't speak to how truly open they are, having never used them (do they have e.g. Specialized hardware/software requirements for building one?) In... - Source: Hacker News / about 1 year ago

• MFA/2FA required for all Cloud services

  Or rather the real open source alternative https://onlykey.io/. Source: over 1 year ago

• Password entering question

  I like my OnlyKey for this. It allows you to store up to 24 passwords, and is locked with a pin. (That's just scratching the surface of what it can do) https://onlykey.io/. Source: over 1 year ago

• My Issue with Yubico

  There's also OnlyKey. Pretty sure they're open source. Might be worth a look. Source: almost 2 years ago

• Question for my Blind Wife using a tablet

  Sure, use it all the time. Yubikeys are good for FIDO, etc., but also have the ability to pump out a static password. Here is a link from Yubikey that explains the process. https://www.yubico.com/resources/glossary/static-password/ With a Yubikey this is all very simple and easy. You can take things much further with an OnlyKey (onlykey.io) or a Bluink key (bluink.ca) and others. With a Yubikey, you do have to... Source: almost 2 years ago

• Yubikey+Keepass vs Onlykey duo vs Nitrokey 2

  Https://onlykey.io/ supports U2F, TOTP, and has a clever way to act as a basic password manager by functioni6as a USB keyboard...as long as you have 24 accounts or less. Source: almost 2 years ago

• OpenSource Self-made Hardware Security Key?

  As others have already said, you can't just convert them as a hardware security key contains a processor, and effort it put into them to make tampering difficult. That said, the OnlyKey might be of some interest to you both as a product and a learning tool as it's firmware and software are open source. Source: almost 2 years ago

• Finally scaled down to 34 keys and my brain is melting.

  OP might do better with one of these - https://onlykey.io/. Source: about 2 years ago

• OnlyKey Agent adds full gpg-agent support, supports ed25519 and RSA OpenPGP keys

  OnlyKey is an open source security key that comes in two versions, the larger model with on device PIN entry and the smaller USB-C model. You can import existing OpenPGP keys then use OnlyKey as hardware key with GnuPG. You have to touch OnlyKey to authorize private key operations. Source: over 2 years ago

• OnlyKey DUO - The Ultimate Security for Security Professionals. Using a physical security key and physical password manager to prevent ransomware.

  OnlyKey not only functions as a hardware password manager but also supports supports the most common two factor authentication methods such as OATH TOTP, FIDO U2F, and FIDO2. Source: over 2 years ago

• What 2FA apps should I use

  I would recommend switching to a hardware key like OnlyKey. If you want to use an app then switch to Aegis which is encrypted & makes regular backups. After that delete Duo. Source: almost 3 years ago

• Why do security keys store secrets unencrypted or poorly encrypted?

  I have started designing infrastructure for my projects and I think having a proof of identity is a good starting point. I have looked at devices like https://www.yubico.com/products/yubikey-5-overview/, https://onlykey.io/, https://shop.trezor.io/product/trezor-model-t and https://asicvault.io/ and got surprised by the general approach to keeping secrets secret. Why do these devices focus (to a varying degree) on... - Source: Hacker News / almost 3 years ago

• [Help&Suggestion] More a Tool than a Hack-desire, USB Keyboard Simulator (BadUSB?) and sending Keys (like reverse keylogger)

  Depending on what your planned use for the device was https://onlykey.io would do what you need. It wouldn’t be much more flexible than what you posted however as it’s intention is mainly to enter a username, tab to password and enter that then return to login amongst its other features. Source: about 3 years ago