Swissbit - iShield Key Pro Security Key

Deal Chatter Clearance
1

Swissbit - iShield Key Pro Security Key

2

@Narfcake and @jimfowler8 - can either of you comment on security of using FIDO / FIDO2 USB keys?

  1. There are quite a few manufacturers but how do we know the dongles are safe …and not USB malware themselves?
  2. Anything plugged into a PC can be unsafe.
  3. And a lot of these are made outside the USA
  4. Whether they are legit or even make cracking facilitated - seems impossible to tell.

Any advice?

3

I haven’t looked into passkeys at all. The XKCD method + 2FA has seemed to keep things in check well enough for me, at least.

2 Likes
4

Thank you for the reply. Likewise. I use mixed alphanumetic and symbols interspersed plus 2FA. Even multi level MFA at work.

But I received two Thetis dongles from manufacturer, but do not know whether to trust them or how to test.

5

You could just use a Yubikey. They’re pricy, but very well established and used for enterprise level security at large and small companies.

I have three. Two are backups.

6

Thanks. Thetis reportedly is used even by the US military, but I am not sure if their security is swiss cheese with extra large holes. Meanwhile, Apple Watches are forbidden on Chinese PLA bases.