YubiKey · Nitrokey
What it's for
A small physical key (USB, often with NFC) that proves your identity with a single touch.
Why it matters
It’s the strongest 2FA: it resists phishing, because the key checks the site’s real address before responding. Nitrokey is the fully open-hardware, open-firmware alternative. A fake site can’t trick you.
For whom & when
Those who want maximum security on key accounts. Buy two (one main, one backup).
Install & use
- Get two keys from yubico.com or nitrokey.com.
In each account’s security settings (email, password manager…), add a “security key” or “passkey.” Enrol both keys.
- Keep the backup key in a safe, separate place.