====== Hardware tokens =====
These authenticate you with a challenge-response cryptographic algorithm. You can use them for [[2fa|two factor authentication]].

===== hardware =====

  * [[https://www.nitrokey.com/|Nitrokey]]
  * [[https://solokeys.com|Solokey]]
  * [[https://uruauth.com/|URU Key]] – ESP32 based thumb-size wireless biometric FIDO2 Authenticator device.
  * [[https://www.yubico.com/|YubiKey]]

===== methods =====
==== Smartcard ====
==== FIDO ====
==== FIDO2 ====

===== software =====
  * [[https://github.com/mjec/khefin|khefin]] – use a FIDO2 authenticator with hmac-secret extension support to generate passphrase-protected secrets.

===== related =====
  * [[:admin:tpm|Trusted Platform Modules]]