turvavõtmete

Turvavõtmed, also known as safety keys or security keys, are physical or digital authentication devices used to verify the identity of a user or device. They are a crucial component of multi-factor authentication (MFA) systems, adding an extra layer of security beyond traditional passwords. These keys typically store cryptographic keys or act as a one-time password (OTP) generator.

Physical turvavõtmed often resemble USB drives, NFC tags, or Bluetooth devices. When a user attempts to log in, they insert or tap the key, which then communicates with the authentication server. This communication involves a challenge-response protocol or the transmission of a unique code. The server verifies the key's authenticity before granting access. Popular examples include FIDO U2F and FIDO2 security keys.

Digital turvavõtmed can be software-based, such as authenticator apps on smartphones or smart cards. These apps generate time-based one-time passwords (TOTP) or HMAC-based one-time passwords (HOTP) that change periodically. Smart cards, embedded with a microchip, can store digital certificates and perform cryptographic operations to authenticate users.

The primary purpose of turvavõtmed is to mitigate the risk of unauthorized access due to compromised passwords. They are resistant to phishing attacks and credential stuffing, as the physical or unique digital token is required in addition to the password. This significantly enhances the security posture of online accounts and sensitive systems.