Yubico Forum
https://forum.yubico.com/

OTP *and* Static Passwords
https://forum.yubico.com/viewtopic.php?f=16&t=263
Page 1 of 1

Author:  scaife [ Fri Feb 20, 2009 3:12 am ]
Post subject:  OTP *and* Static Passwords

I have been hoping for a way to do both static and one-time passwords for a while and I haven't seen anyone on here mention it.

I love the Yubikey and bought mine a few months back to use with OpenID, however for me it has gone largely unused because so many sites I visit don't support OpenID. I don't want to switch my key to static mode because the OTP is the best feature of it!

Is it feasible to implement a feature that would allow either the OTP or the static password to be generated depending on the length of the button press?

Author:  Massyn [ Fri Feb 20, 2009 4:28 am ]
Post subject:  Re: OTP *and* Static Passwords

How about adding 2 buttons (OTP vs Static).

Or, depending on the depth of the electronics on the inside, you may even make the key double sided...It's a piece of plastic, depending on which side you pop it into your USB on, it's either OTP or static...

That would be my suggestion..

Cheers

Phil

Author:  network-marvels [ Fri Feb 20, 2009 4:27 pm ]
Post subject:  Re: OTP *and* Static Passwords

Excellent suggestions!!!!

We have forwarded these suggestions to the Yubico Hardware team.

Author:  PatrickN [ Fri Feb 20, 2009 4:43 pm ]
Post subject:  Re: OTP *and* Static Passwords

I don't like the idea of a double sided key because it is sometimes very difficult to tell which way up is the correct way with USB. Though I suppose if the button would light up one colour for static and another for otp mode then that would not be so bad.

How about a double tap for static and single tap for otp modes, or vice versa?

Author:  Kamikaze28 [ Fri Feb 20, 2009 10:36 pm ]
Post subject:  Re: OTP *and* Static Passwords

doing something like that would add logic to the key - and it's not as easy as the yubikey is designed to be - if the hardware permits it, I think the double sided approach is the way to go - maybe some sort of marking would be helpful to distinguish OTP and Static-Mode side before plugging it in.

Another idea I've had was a little switch on the side of the key to switch from OTP to Static and back - advantage here would be, that you could use both things without unplugging the key.

Author:  Massyn [ Mon Feb 23, 2009 5:54 am ]
Post subject:  Re: OTP *and* Static Passwords

Kamikaze28 wrote:
doing something like that would add logic to the key - and it's not as easy as the yubikey is designed to be - if the hardware permits it, I think the double sided approach is the way to go - maybe some sort of marking would be helpful to distinguish OTP and Static-Mode side before plugging it in.

Another idea I've had was a little switch on the side of the key to switch from OTP to Static and back - advantage here would be, that you could use both things without unplugging the key.

haha! be careful, if you're going to add a switch, you might as well make it a multi selection switch... Think about it... Having just one is nice, but then the possibility of having multple passwords would also open up.

Pick 1 for my WPA key
Pick 2 for my Truecrypt key
Pick 3 for my OTP mode, etc.etc.etc.

Now it becomes interesting...

Author:  network-marvels [ Mon Feb 23, 2009 8:15 am ]
Post subject:  Re: OTP *and* Static Passwords

The Yubico HW team are constantly looking into different possibilities to do both OTP and Static PW on the same Yubikey and we appreciate all the ideas on the forum. However, the primary benefit of Yubikey is its simplicity when used which is very important benefit to keep. When adding multiple functions to the same button the Yubikey gets a bit more complicated to use so right now most users that need to use both Static PW and OTP have started using separate keys for each purpose and some has put different colored stickers on the Yubikeys to easily tell the two apart. This does not mean that we have given up on a combined Static and OTP Yubikey but for now the use or two separate Yubikeys have been a viable option for many users.

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/