U2F/Fido Key?

DeletedUser60

Hello,

i want to have a more secure way to authenticate 2FA Codes and because of that I plan to buy a U2F/Fido Key. But I don't know if I should buy an U2F or Fido Key...I did read that one GrapheneOS Developer mentioned Trezor Safe 3 Key but I'm not sure if it is still recommended? Is the Trezor Safe 3 more secure than YubiKeys? And what about Trezor Safe 5? Because that is the newest one and it was mentioned on their Website to have the most Security?

How I want to use this Key:

I only want to use it with my Phone, I don't need NFC or fingerprint or for Crypto or Backups.
I want to be able to use the Key App from Github, since I don't use any Google. And it should only be Open Source.
I only need the Key for two 2FA Codes, nothing more.

I hope someone can guide me to the best Key for my wishes and Situation. If possible I want the most secure and private Key. Maybe @GrapheneOS can recommend me something if possible or explain about the Trezor Safe 3, instead of Trezor Safe 5 and why it was recommended in general, instead of for example YubiKeys? Would be helpful! Thank you!

fid02

DeletedUser60 i want to have a more secure way to authenticate 2FA Codes

In which way do you consider OTP codes to be more secure when stored on a security key, as opposed to when stored on a modern Pixel device with a good secure element?

DeletedUser60

But the Key should be updateable. Meaning that I don't want to always having to buy new Keys for new Versions. I just want one Key, which get's Updates. And I want to avoid Keys which have bad Security of lacking Updates or being behind.

DeletedUser60

fid02 Honestly I have not enough knowledge to explain in which way, but from what I did read out of YubiKey or heard, it seemed to me, that they give a more secure way or place to do this job. I really don't know if they would be more secure just on an Pixel with GrapheneOS by using Aegis, but I can only tell you as I said, what I remember from my research.

DeletedUser60

fid02 But one Security Benefit of the Trezor Safe 3 for me is that my 2FA Codes are on a seperate Device, than my Phone. Those important Codes are putten in another basket, to say.

DeletedUser60

@GrapheneOS Could you help/explain in this topic?