+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: OpSec and OSINT (https://hackforums.net/forumdisplay.php?fid=322)
+---- Thread: YubiKey in 2026 for true zerotrust security? NZ user aiming for maximum protection (/showthread.php?tid=6327257)
YubiKey in 2026 for true zerotrust security? NZ user aiming for maximum protection - tdbnz123 - Jun 18, 2026
I’m based in New Zealand and I’m upgrading my entire digital security posture to a strict zero‑trust model. No assumptions, no reliance on a single device, and no weak links. I want a setup where even if my phone is wiped, stolen, compromised, or offline, I still maintain full control.
I’m looking at getting a YubiKey, but I’m open to anything similar or better if there’s a stronger option in 2026. I don’t know many alternatives, so I’m here for input from people who actually run hardware‑based authentication in their OpSec stack.
Current setup:
• iPhone 15 Plus (USB‑C + NFC)
• Windows 11 PC
• LastPass as my main password manager
• Microsoft Authenticator + LastPass Authenticator (LP Auth is primary)
Security goal:
I’m aiming for maximum protection, not “good enough.”
I want a system that is:
• phishing‑proof
• SIM‑swap‑proof
• malware‑resistant
• hardware‑verified
• independent of my phone
• zero‑trust by design
If a device fails, gets stolen, or gets compromised, I still want full access and full control.
What I want the hardware key for:
• Hardware‑based Windows login
• Replacing authenticator apps with FIDO2/WebAuthn
• Locking down LastPass login
• Reducing reliance on phone‑based codes
• Maintaining access even if my phone is gone
• Keeping a backup key stored securely at home
I’m mainly looking at the YubiKey 5C NFC, since it works with both my iPhone and PC.
But if there’s anything stronger, more durable, or more future‑proof, I want to hear about it — Feitian, SoloKey, Titan, or anything else that actually holds up under real‑world threat models.
Main question:
For those running hardware keys daily — is YubiKey still the gold standard in 2026, or is there a better device or ecosystem for someone building a maximum‑security, zero‑trust setup?
If you’ve used hardware keys with:
• Windows Hello / Windows login
• LastPass
• iPhone NFC
• Older USB‑A machines (with adapters)
…share your experience. Reliability matters more than marketing.
Also interested in how people carry theirs. I use lanyards often, so I’m considering wearing the key on a lanyard or necklace. Curious what actually works without damaging the key.