147

Just got my Nitrokey! (programming.dev)

submitted 5 days ago by unglueclass23@programming.dev to c/buyeuropean@feddit.uk

13 comments fedilink hide all child comments

In total with shipping I paid 60 eur.

https://shop.nitrokey.com/shop/category/nitrokeys-7

https://www.nitrokey.com/about

top 13 comments

sorted by: hot top controversial new old

[-] fxdave@lemmy.ml 3 points 3 days ago

The questions everybody's looking for in the comments: What's this? Why aren't you using a password?

[-] unglueclass23@programming.dev 3 points 3 days ago

It's a security key meant to replace passwords with passkeys, but it does some other things as well.

The main thing which makes them secure is no one can export, read, copy the keys that are inside it, even if the PC is infected.

I also store a GPG key to encrypt / decrypt some sensitive stuff and a SSH key.

You can also use them as OTP replacement instead of using apps like google authenticator, aegis or whatever your choice is. It also makes it more secure. Though I don't think I will be doing that.

Main thing I bought it was for GPG and to secure my password manager. The good thing is because you have a security key your PIN can be significantly shorter than a password managers password and you don't sacrifice security. Nitrokey, for example, allows 8 tries to enter the FIDO2 (passkey) PIN. After 8 incorrect attempts it will block it and you will need to do a reset. Also people have to physically have your security key to even enter the PIN. So I simply have a 6 digit PIN code.

[-] beeng@discuss.tchncs.de 3 points 4 days ago

Its to store passkeys in a secure enclave if I get it right? With finger print?

[-] glitch1985@lemmy.world 5 points 4 days ago

Your anus print is also unique. Use that information how you want.

[-] unglueclass23@programming.dev 1 points 3 days ago

It doesn't come with a fingerprint scanner. Just have to tap to confirm the log in. Obviously , you set a PIN as well.

[-] beeng@discuss.tchncs.de 1 points 3 days ago

Enter the Pin on your PC? Doesn't that mean it could be read? Crypto safes do pin/unlock on device so just curious

[-] unglueclass23@programming.dev 1 points 2 days ago

It can be read. But you also have to physically tap the security key to do anything. If they don't get access to your security key the PIN alone is useless.

[-] philpo@feddit.org 2 points 4 days ago

Tbh, I find Nitrokey over priced. Token2 is technologically superior (when you only look at the core passkey field) and cheaper - and at least is swiss made. especially as a sensible policy requires more than one token.

[-] LeTak@feddit.org 5 points 5 days ago

Nice, I also have some. Sadly one of them died.

[-] tooks@lemmy.world 3 points 5 days ago

Love the idea, but I was wondering about their lifespan. Or misplacing/losing it.

[-] LeTak@feddit.org 3 points 5 days ago

I like the software. It was somewhat easier than yubikey.

[-] akunohana@piefed.blahaj.zone 4 points 5 days ago

Sweet! I myself have been rocking my Yubikey for six years now. 😃

[-] rustydrd@sh.itjust.works 3 points 5 days ago* (last edited 5 days ago)

Nice, I got one of these too! Using it mainly for 2FA at my workplace, and it works really well. Easy to set up, even for a security noob like me.

this post was submitted on 19 May 2026

147 points (100.0% liked)

Buy European

10396 readers

45 users here now

Overview:

The community to discuss buying European goods and services.

Matrix Chat of this community

Rules:

Be kind to each other, and argue in good faith. No direct insults nor disrespectful and condescending comments.
Do not use this community to promote Nationalism/Euronationalism. This community is for discussing European products/services and news related to that. For other topics the following might be of interest:
Include a disclaimer at the bottom of the post if you're affiliated with the recommendation.
No russian suggestions.

Feddit.uk's instance rules apply:

No racism, sexism, homophobia, transphobia or xenophobia.
No incitement of violence or promotion of violent ideologies.
No harassment, dogpiling or doxxing of other users.
Do not share intentionally false or misleading information.
Do not spam or abuse network features.
Alt accounts are permitted, but all accounts must list each other in their bios.
No generative AI content.

Useful Websites