While Yubico's YubiKeys support OTP, not all the FIDO supporting keys do. I appreciate having OTP 2FA support, but FIDO2 is quite a bit more secure and easier. I'd just like to throw my hat into the ring with a +1 for FIDO2 support.

Maybe agile works to make their own chip and harware token? Maybe agile concedes to companies like Yubico that FIDO2 has the potential to entirely replace passwords while agiles product manages that second factor. What such an offering would look like, I dont know. but the hundreds of users who have asked. I hope you consider your options and take these suggestions to heart, not my suggestions. I said about a year ago that if Agile didn't move to incorporate FIDO and u2f support for consumer accounts in a meaningful way I would move to other solutions. Companies are moving fast to try and make passwords the second, optional factor while hardware tokens are the first. They offer a great advantage for consumers. A hardware asymmetric encryption device that uses FIDO and U2F, as well as integrates either on device or via an app the password management aspect.

they will just need a hardware token that does the heavy lifting.Īnd - if you wanted to take this a step farther, though im not sure it's entirely needed at this point - imagine a dedicated piece of hardware that serves both purposes. Consumers wont have to remember numerous complex passwords, reuse passwords, or utilize paid or free password managers to generate and manage it for them. Service providers could, and are, providing these tokens for basically free to their users.

Why? Because users can authenticate with hardware tokens which don't require a monthly subscription plan. This type of move is a consumer blessing.

but this is basically service providers finally catching up to years of NIST suggestions, consumer complaints, and countless data breaches. I understand from a business perspective why Agilebits would be very hesitant, heck even combative of the idea. Whether that's an actual total replacement of passwords, or merely used as a second form of authentication with a pin, biometric, password, whatever. Login (asymmetric encryption via the hardware token) is the future for both the business side as well as consumer side.

Yubikey 4 fido2