Post
Topic
Board Beginners & Help
Merits 3 from 2 users
Re: 2FA HW security keys.
by
Saint-loup
on 02/03/2020, 23:35:18 UTC
⭐ Merited by DdmrDdmr (2) ,Captain-Cryptory (1)
This sounds cool, can we import our google authenticator keys to this authenticator dongle and vice versa? do you have a video on how to use this and what is the price range just curious. If its really affordable and flexible for sure I am gonna buy it, thanks for the info.

If you mean TOTP based key then the answer is nope. But Google has the option to bring to bear U2F protocol and utilize the  HW keys like Yubico to authenticate you. It works in following way. When you register you HW-key-dongle at Google it sends the random number to that dongle. Based on that number the last generates private - public keys pair. Then the public key of that pair is send back to Google that assigns it to your ID. Next time when you  log in to Google  it sends to HW-key the message and waits for outgoing one that must be  signed by HW-key using the corresponding  private key. After receiving encrypted  message Google decrypts it with public key and checks. If everything is correct then you are in.  

P.S. I'm using Yubikey5 to log in to my bitcointalk forum account. But this is the other story.  Wink
Here is a pretty good article explaining the main differences between TOTP and U2F.
Unlike TOTP with U2F you don't have to share a seed with the server, so it doesn't need to store it and to send it to you, and you don't have to send any symmetric code.





https://blog.trezor.io/why-you-should-never-use-google-authenticator-again-e166d09d4324