The main differences between FEITIAN OTP hardware tokens and FIDO U2F Security keys are
FIDO U2F Security Key
- The USB device protects the user’s private keys with a tamper-resistant component known as a secure element (SE)
- Security Key authenticators don’t require any special drivers
- Users can easily enroll their own devices with Duo’s service
- Only supported by Duo integrations that use the Duo Prompt
- A Security Key’s real-time challenge-response protocol protects against phishing attacks
OTP Hardware Tokens
- Wide range of compatibility with any broswer or application
- Must be managed by Duo administrators as hardware tokens
- Can be used with append mode and the Duo Authentication Proxy
- OTP codes can still be phished to an adversary (known as man-in-the-middle/man-in-the-browser attacks)
Note: It’s possible to use FEITIAN OTP Tokens and FIDO Keys for both the online and Offline Access mode in Duo Authentication for Windows Logon by making use of both OTP and U2F modes respectively.
