OnlyKey: Open-Source Alternative to YubiKey (onlykey.io)

Article summary

The OnlyKey is an open-source alternative to the YubiKey, offering multiple methods of two-factor authentication. The device has been around since 2016 and supports FIDO2, U2F, Yubikey OTP, TOTP, and Challenge-response. The company claims to have open-source firmware, but some commenters have raised concerns about the lack of open hardware designs. The OnlyKey has received mixed reviews, with some users experiencing issues with the LED lights and others praising its security features.

Main themes

• Open-source security
• Hardware vs software security
• Authentication methods
• Trust and transparency
• Security key comparison
• Convenience vs security trade-off

What commenters say

• The OnlyKey's lack of open hardware designs is a major concern for security and trust.
• Open-source software is not enough, open hardware is also necessary for true security and transparency.
• The benefits of open-source software, such as rapid updates and community scrutiny, outweigh the potential risks.
• The OnlyKey's security features and compatibility with various authentication methods make it a viable alternative to the YubiKey, despite its limitations.
• The company's claims of open-source hardware are misleading and potentially deceptive.
• The ability to audit and verify the security of a device is crucial, and open-source hardware and software are essential for this purpose.
• The trade-off between security and convenience is a major consideration when choosing a security key, and the OnlyKey's design may not be suitable for all users.