Want to use logins for the reading sites I visit safely and easily on multiple computers. Subheads: hardware key, Bitwarden

Judy in Texas · Dec 13, 2025

I thank all of the people who have helped me so far in my search for a safe and secure way to secure my computers.

I have decided that the weak spot for me is the password to Bitwarden. I decided also that I don't want to trust that password to being saved on my computer. I found a fellow believer on Ask Woody, (Deanna McElveen AskWoody Plus – 22.47.0 – 2025-11-24) who does not trust online password managers. (That part of the post is copied below.).

I saw a possible solution to that issue on one of the threads here by Comport Colin (Yubico Security Key NFC)
that there is a way to use a hardware key to input the Bitwarden password and then let it log in to the subscription sites. (copied below).

I have come up with a proposal that I would like to run by you. My husband and I use multiple Windows 11 computers that have a mix of USB A and USB C connectors, sometime with only one or the other available. If I have multiple hardware keys with both types of USB connectors I could, for example, plug one in to my desktop, read stuff including sites with passwords or passcodes stored on the hardware key as Compot Colin describes. Then in the evening I could shut down the desktop and do some more reading on the laptop in my recliner. My husband could use one of the keys to do the same. I would have a couple of backup keys stored as replacements.

I'm not going to put any passcodes are passwords into this device that involve any more money than the cost of a subscription which can be ended simply by discontinuing a credit card. I would not have my email passwords my bank passwords my or Amazon password stored on a device.

My needs are to understand the rest of what Comport Colin said and to find a way to have a security device that has both USDA and USBC, either designed that way or with one of the swapping dongles.

So, for example,1) can I get a bunch of Yubikey 5’s set up all alike, either USB A or C, and use them with a dongle to serve both? I already have a bunch of those due to devices that connect to only one or the other)

Or 2) can I get a bunch set up all alike, some with USB A and some with USB C?

I know this is really long. Thank you very much for reading it. What do you think of this idea (such as I have missed a much easier way) or does this sound feasible/doable/like a good idea or not?

-----
What Deanna wrote: I know there are all kinds of online password tools out there, but let me direct you to the beautiful foil hat on my head. I do not trust online password managers. It's one thing to have a password get away from you — it's a whole other game so see all of them get dumped in a hack.

What Comport Colin wrote: ...at the moment, I use this: password manager with browser integration (it can enter the passwords as an in-browser manager can) and the password manager itself is unlocked with a yubikey (with a self-signed certificate that the yubikey manager application allowed me to create and save onto my key). So whenever I would like my password manager to manage a site-login, I start it, enter the Yubikey PIN and that's it. Things needed: yubikey 4/5, yubikey manager application, password manager with browser integration which allows SmartCard-unlock...

telepro21 · Dec 13, 2025

Hi Judy in Texas,

Several years ago, I decided to start to focus on digital security and to reduce my "digital footprint" as much as possible

Here is my approach to digital security:

Items needed:

--Bitwarden Premium account (extra features are worth it)

--Yubikey 5 NFC (I have two keys; each must be registered separately to whatever site/account/service needed) Mine have USB-A (Models for USB-C are available, too)

--My Yubikey is also able to store passkeys and is FIDO certified. (Translation: my keys are the more expensive models)

--I use the Bitwarden browser plug-in on MS Edge

I ALWAYS carry my Yubikey on my person as it is the second factor in my 2FA/MFA accounts
I try not to ever use SMS text messages to receive OTP messages
OTP and TOTP codes are preferably sent via email
I have memorized my Bitwarden Master Password and have never written it anywhere
My Bitwarden browser plugin is locked by default until I unlock it for use when needed
Bitwarden on my desktop and Bitwarden on my mobile device keep my passwords synced.
Note that on my mobile, I do NOT use fingerprint unlock.
I have set up a passkey to use when logging into my Bitwarden account
I am trying to use Passkeys wherever they are available to eventually move away from the username/password environment of some digital environments
Also, Bitwarden can be locally hosted by you if storing things on-line is not preferred.

Hope this helps,

telepro21

Ghot · Dec 13, 2025

@Judy in Texas

Things needed: No password managers, no pile of dongles... just one thing

People actually used these before computers.

There's maybe ten or 15 sites you really "need" the passwords for, in case something dreadful happens.
Just memorize them.
For all other sites, just use dumb, easy to remember passwords.

Remember those commercials for "Lifelock".
Just give us all your important info and we'll guard it for you.

I have a better idea... how bout I don't give it to you, and that'll be one less person it can be stolen from. ^^

Just my...

gunrunnerjohn · Dec 13, 2025

I use Bitwardon, I used to use LastPass, but they've had too many problems and bugs lately, and the last price increase convinced me to switch.

gunrunnerjohn · Dec 13, 2025

Ghot said:
@Judy in Texas

Things needed: No password managers, no pile of dongles... just one thing

View attachment 156867

People actually used these before computers.

Why would you want to type all those complex passwords in when you can have them automatically filled in? The password managers also fill in your name/address, CC info, etc.

Judy in Texas · Dec 13, 2025

telepro21 said:
Hi Judy in Texas,

...

--My Yubikey is also able to store passkeys and is FIDO certified. (Translation: my keys are the more expensive models)

--

Telepro21, thank you. That helps a lot. Do I just look for a model that is FIDO certified, or can you tell me a specific model?

Judy in Texas · Dec 13, 2025

Ghot said:
@Judy in Texas

Thank you Ghot. I always appreciate your advice. As I said, I do plan to do that with all of the passcodes and words that would tell anyone more about me than that I read certain standard publications. I just use unique passwords for each of my reading materials, do not ust read them through (sometimes I am reading one and it refers to another), and I want to move that experience from one computer to another.

pseymour · Dec 13, 2025

Judy in Texas said:
I have decided that the weak spot for me is the password to Bitwarden. I decided also that I don't want to trust that password to being saved on my computer.

That's not how Bitwarden works. When you enter your password, that password and your email address are used to generate an encryption key; this happens locally. That encryption key is stored in memory as long as the vault is unlocked. Once you lock your vault or log out, the key is deleted from memory. Your password is never saved locally or at Bitwarden HQ.

Ghot · Dec 13, 2025

gunrunnerjohn said:
Why would you want to type all those complex passwords

I don't type them, I copy/paste them.

tecknot · Dec 13, 2025

Ghot said:
I don't type them, I copy/paste them.

Hi Ghot,

Is that say from a spreadsheet or your memory?

Kind regards,

tecknot

Ghot · Dec 13, 2025

tecknot said:
Hi Ghot,

Is that say from a spreadsheet or your memory?

Kind regards,

tecknot

I tried copy/pasting from my brain, but it hurt too much.

Just from a text file.

glasskuter · Dec 13, 2025

While I consider myself a safe computer user, I am not paranoid about security as so many seem to be. It is my belief that one can get to the point that his paranoia becomes a detriment in his computer use and he no longer enjoys the experience. Fact of the matter is, no matter what anyone does , if he turns his computer/phone on, he is not 100% safe. There is no 100% safety in the computing world.

Ultimately, I believe the best protection one can have is the user himself/herself.

I DO

on every device I own use a password manager protected by a 22 digit master password as well as its passkey.
let my password manager create passwords for sites as it is designed to do. Change these passwords every 6 months if they are financially related.
use passkeys and 2FA on all financial related sites.
use biometrics on my mobile devices.
use Malwarebytes Premium alongside Defender.
regularly backup my systems and keep my images in a safe place.
Use my common sense.

I DON'T

save any passwords in my browsers.
click on a search result just because it's the one at the top of a search list.
click on links in emails, social media sites, or text messages.
click on ads ANYWHERE, especially social media.
keep highly sensitive data on my computer.
believe in any popup or email message giving me a number to contact contact Microsoft, Mcafee. Medicare, my insurance company, or any other entity through the number it gives me. People need to understand these legitimate companies will not contact you in such a manner. Likewise, with scam callers identifying in any way with these companies. Sorry, but I'm not going to contribute to scamming Medicare by accepting a free back brace or diabetic supplies.
believe in any text or email that says I owe toll fees or any other subject that sounds the least bit fishy and giving me a number to call or a link to click..
give anyone remote access to my systems unless I have 100% confidence in who I am dealing with.
Allow anyone to use my devices, (not even my husband who is not very computer literate. He has his own PC for his playtime and I manage all our personal business on mine. When I ever am incapacitated or dead, instructions are in our bank box as well as paper copies of my password list).
Last, but not least, I don't fret or lose sleep over it.

telepro21 · Dec 14, 2025

Judy in Texas said:
Telepro21, thank you. That helps a lot. Do I just look for a model that is FIDO certified, or can you tell me a specific model?

Here is a link to the one I have: Amazon.com

Judy in Texas · Dec 14, 2025

Ghot said:
I tried copy/pasting from my brain, but it hurt too much.

Just from a text file.

So maybe all I need to do is put a text file on a USB (I have ones that work on USB A and USBC!) and store the USB separately from the computer every night. Neat! Thanks again.

Judy in Texas · Dec 14, 2025

Thanks to all of you. Will close this thread.

gunrunnerjohn · Dec 16, 2025

Ghot said:
I don't type them, I copy/paste them.

Really? I'd like to see how you do that from the book you claimed they're saved in!

Deepnet · Dec 16, 2025

Hi Judy, Fido Keys with both USB A and USB C connectors do exists - e.g. SafeKey/Fold (NFC-DUAL). Either of the USB ports can be plugged in during authentication, and you have the option of using an NFC connection instead (if needed).

Want to use logins for the reading sites I visit safely and easily on multiple computers. Subheads: hardware key, Bitwarden

Active member

My Computers

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computers

Active member

My Computers

Active member

My Computers

putting the mental back in experimental

My Computer

Well-known member

My Computers

living in a van down by the river

My Computer

Well-known member

My Computers

aka Mama Glass

My Computers

Well-known member

My Computer

Active member

My Computers

Active member

My Computers

Well-known member

My Computers

New member

My Computer