Feitian K44 & K33 2FA Security Key Review! Passwordless Authentication with Biometrics!

⭐IN TODAY'S VIDEO ⭐
Reviewing the Feitian iePass security key and the Feitian AllinPass FIDO2 biometric security key!
Chapters:
0:00 Welcome!
Intro to MFA keys
iePass
AllinPass
Who Are These For?
LINKS:
www.ftsafe.com...
www.ftsafe.com...
download.ftsaf...
www.ftsafe.com...
fido.ftsafe.co...
fido.ftsafe.co...
fido.ftsafe.com/
www.ftsafe.com...
www.ftsafe.com...
www.ftsafe.com...
www.ftsafe.com...
www.ftsafe.com...
FTC disclosure:
Feitian sent Morse Code these hardware keys for review.
Becoming a Morse Code Member by checking out the perks linked here!:
/ @shannonmorse
💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜
SUBSCRIBE! 🌸 www.youtube.com...
TWITTER 🌸 / snubs
Patreon 🌸 / shannonmorse
💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜
SUPPORT MY WORK
Patreon 💛 / shannonmorse
Buy Me a Coffee 💛 www.buymeacoff...
Shop 💛 snubsie.com/shop
TeeSpring 💛 teespring.com/...
Coupon Codes 💛 snubsie.com/su...
Tech I Use & Recommend 💛 kit.co/Shannon...
💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜
FOLLOW THE SOCIALS THINGS
Twitter 🌸 / snubs
Instagram 🌸 / snubs
KZbin 🌸 www.youtube.com...
Website 🌸 www.shannonrmor...
💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜
TECH I USE AND RECOMMEND
My Kits, Builds, and Must Haves ✨ kit.co/Shannon...
My Amazon Influencer Page ✨ www.amazon.com...
💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜
MY OTHER SHOWS
ThreatWire 🌙 www.youtube.com...
Sailor Snubs 🌙 www.youtube.co...
💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜
GET IN TOUCH
Mail ✈
snubsie.com/co...
Email for Business and Sponsorship Inquiries ✈ [e-mail]
My Media Kit ✈ snubsie.com/wo...
Sponsor This Channel ✈ snubsie.com/sh...
Music from 🎵 Epidemic Sound: www.epidemicso...
💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜💜
😍 FTC DISCLAIMER 😍
Affiliate links listed above allow me to receive a small commission. Any sponsorships for videos are noted in video and listed in descriptions. Any products provided as gifts are listed above. Thank you for your support!
Comment section code of conduct policy:
Constructive feedback is appreciated, but please leave unproductive, divisive and harmful conversation at the door. Hateful comments are not tolerated, and these kinds of messages will be automatically removed. Thank you for making this community a welcoming experience for all viewers :)
snubsie.com/co...

[@ShannonMorse]

FYI, I have a Comment section code of conduct policy: Constructive feedback is appreciated, but please leave unproductive, divisive and harmful conversation at the door. Hateful comments are not tolerated, and these kinds of messages will be automatically removed. Thank you for making this community a welcoming experience for all viewers :) snubsie.com/code-of-conduct

[@toglk...375]

Just out of interest as a viewer. Are individual creators allowed to employ their own "Code Of Conduct" to the comments section of a KZbin Video under KZbin's own "Terms Of Use"? I ask this because I'd rather not see you get into hot water over employing such policies when it's not allowed, and I know that KZbin a pretty strict on how they handle content control on their platform in recent years. All the best to you, TOGLK.

[@THEMithrandir09]

Could you comment on the crypto used? Rsa 2048 is not enough these days and Pcurves(256, 384) could be broken curves(see wikipedia on "nothing up my sleeve numbers"). I can see rsa 4096 and 8192 not being an option for performance reasons, but ed25519 SHOULD be supported imho.

[@bambuX1cc]

Thank you Shannon!!!! Great vid!!! I will be getting one of these for sure!!! Have a wonderful day!!!!

[@ShannonMorse]

thanks for watching!

[@NegroRotary]

Thank you for this video, i didn't know these things existed

[@JamesNelson-gg8up]

Gorgeous

[@Electronicview]

5:23 is nice review.

[@-_IT_-]

I think I am in love... I need one of those!!

[@webcomment8895]

You should do some of these hardware key demos using macOS especially showing logging into the 🖥 using a fido2 key.

[@jseaber]

Thanks but the issue that’s the Kets support windows hello but only for local accounts not Microsoft accounts. Ironically they support azure and active directory though which is more complex. So you go through the setup and it’ll kick it back. Yubico removed support for windows hello when using Microsoft accounts for windows hello. I think a lot followed suit. If you get spare time could you try it briefly? Thanks

[@janokartal5690]

Nice one Shannon

[@ShannonMorse]

thanks!

[@SeattleRingHunter]

My little pony hair cute!

[@ShannonMorse]

Haha

[@adrianmejia1107]

i bought feitian k33 and when i try to use it in google, it says that that key can't be used, do you know what's going on?

[@Nahuel.E.R.]

Hi, thanks a lot❗. And how to use the NFC method❓. Maybe a USB NFC reader would be a good config...

[@ventsislavstoyanov9431]

thanks

[@bradleybratten4436]

Anyone aware of how to trigger the NFC on the K33? Trying to get an iPhone to detect it, but no luck. The documentation leaves something to be desired.

[@jdonwells]

With the rising sale of Chromebooks, what do we use to keep one of those safe? I have not seen any demos of a hardware key with Chome OS.

[@adrianmejia1107]

how can i find a cable that works?

[@carlweiss8942]

i have seen where you can spoof the fingerprint senser do they have secuity?

[@MikeTrieu]

Eh, if it outputs the same code every time you touch the button, it's not OTP. It's just a static passcode. I suppose a TOTP mode would also behave similarly for the brief duration the code is valid for, but the explanation in this video was a bit lacking for that use case.

[@ShannonMorse]

If you want a better option, I prefer the Yubikey. They support more protocols including OTP and even OpenPGP (currently working on a video explaining this). www.yubico.com/why-yubico/how-the-yubikey-works/ I try to keep my videos around 10 minutes in length. If I’m also doing a tutorial of a product, that means I won’t be able to show all examples in one video. If it’s too long, it’ll be clicked on less. I’m happy to make a separate video about different implementations if the demand is there.

[@onlyzach1]

Great video. One thing that's holding me back from 2FA is what happens if I lose either the key or phone and I'm away from home? Also curious about a USB A adapter compatibility.

[@GuillaumeRossolini]

Compatibility is a thing, you need to shop around to find the key with the connector(s) you need. As for lost tokens, yes that's very much the whole purpose: don't have it, can't log in. You need a backup at home or somewhere. That said, most sites will remember not to ask you every time (after the first time). They'll leave a cookie in the browser or something. And remember, 2FA is often MFA, as in, imagine your Google account is aware of your OTP seed (that you have in a password manager app), as well as physical security keys, then you could choose at logon which second factor to use (among these options).

[@ShannonMorse]

All of this! Thanks for replying Guillaume!

[@Nahuel.E.R.]

@@GuillaumeRossolini So, for this reason is recomended to clean cookies during a period of time❓

[@GuillaumeRossolini]

@@Nahuel.E.R. well, I won't tell you how to do your own security, but this is not the reason why people usually recommend periodically cleaning cookies. These specific cookies are a good thing, experience wise.

[@UmarUsman]

💕🙌🏻

[@MrPontiac005]

❤️

[@jseaber]

Does the second version allow windows hello on a machine that is setup using a Microsoft account instead of local. I would revert to local to use my yubikey but I enjoy the Microsoft sync… so I’ve been a bit put off by what solution I can use for windows hello and MFA or OTP just for my Pc

[@ShannonMorse]

I believe so. I’ve included a bunch of links to their quick start guides and setup instructions in the description. They do make mention to windows hello.

[@john_gyver]

8:46 - I'm not sure "passwordless is the future". There is a major problem: e.g. when I'm sleeping, someone may use my security key or/and my finger to unlock my device. It looks like a strong password is still the most secure solution. Any type of key or biometrics can be used against the owner's will.

[@iLLeag7e]

send this to Lock Picking Lawyer to see how secure it really is

[@ShannonMorse]

Haha

[@mikehomner4724]

Did I miss it, does work with Last Pass?

[@GuillaumeRossolini]

If they allow FIDO2, sure. But one could argue that locking yourself out of your password manager because of a battery failure (in the case of the wireless one) might be a bad idea.

[@toglk...375]

I can't seem to find much information on the official store webpage for these two devices to know if they are closed-source or not. BUT, seeing as they are very clearly not advertising their openness to being scrutinized I feel it's fair for ME to assume that it's unlikely these things are open source.... With that in mind, and, considering that these are made in China & are developed in China, a nation that traditionally has a bad track record for personal privacy & security, I suggest looking at alternative options that are similarly priced but with more features, and critically, that are OPEN-SOURCE, so you can verify their security first-hand. Alternative options that I am aware of; 1.) OnlyKey 2.) NitroKey 2/NitroKey 3 3.) SoloKey V2

[@LadyB_miniatures]

I love the outrage from the Americans here considering the NSA gets all your meta data and the USA is well known for spying on its citizens its the pot calling the kettle black, isnt it?

[@LadyB_miniatures]

@@savemegrilledcheesus494 you know this how?

[@ChadHaviland]

@@LadyB_miniatures The pot and kettle are both black. So what.

[@GuillaumeRossolini]

Can those be re-flashed? I thought they weren't

[@LadyB_miniatures]

@@ChadHaviland chad everyone has been jumping on Shannons comments to scream how bad these keys cos they made from china and they do surveillance etc yet Americans do spying all the time yet thats perfectly fine. the hypocrisy is breathtaking Now you understand why im saying the pot calling the kettle black?

[@Theodek77]

Where i can get one of those

[@ShannonMorse]

links are in the description

[@Electronicview]

like 252. new friend

[@LadyB_miniatures]

Looks like a yubikey clone