Hardware TOTP token
A standalone device generating time-based one-time codes, isolated from PCs and phones.
ProductSecurity & privacy2faauthenticationhardware-token
Recommended in 1 thread
North Korean fake job interview led to $6.3B Binance heisttheregister.com ·
Requiring a code from an isolated token for production changes assumes developer machines may be compromised.
Similar tools
- 1 thread
- trezor-agent ↗Security & privacy1 thread
Agents that use Trezor hardware wallets for SSH, GPG, age and FIDO keys.
- git-credential-gopass ↗Security & privacy0 threads
A git credential helper that pulls HTTPS tokens from gopass.
- 1 thread
- keys-on-the-wire ↗Security & privacy1 thread
Proxy that injects real API keys into outbound requests so apps only ever see placeholder tokens.
- oss-scanner ↗Security & privacy1 thread
Anthropic's open-source tool for scanning OSS projects for vulnerabilities and proposing patches.
- Certificate Transparency ↗Security & privacy1 thread
A public logging framework that records issued TLS certificates so misissuance can be detected.
- Microcorruption Security & privacy1 thread
An embedded-security CTF focused on exploiting a simulated microcontroller.
Also in Security & privacy
- 1Password ↗8 threads
A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.
- 5 threads
- 4 threads
- 3 threads
- Signal3 threads
An end-to-end encrypted messaging app.
- Tor3 threads
An anonymity network that routes traffic through volunteer relays.
- 2 threads
- 2 threads
- 2 threads
- 2 threads
- Convergence ↗2 threads
Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.
- Darknet Diaries ↗2 threads
A podcast covering true stories from the dark side of the internet, including hacking and cyber heists.
















