yubitouch VS passforios

Here's a script that will set that mode, in case you'd like to use it. It prevents someone/malware from being able to use your key after you've unlocked it. For example if you hacked my computer and tried to use it to ssh to another machine you'd be unable because you'd need me to tap the key.

I'd suggest trying 'on' before 'fix', but then switching to 'fix' for the extra security it provides.

https://github.com/a-dma/yubitouch

Yes you can, you can use the https://github.com/mssun/passforios app which as of over a year ago supports Yubikeys.

The UX of having to grab your Yubikey every time is a bit clunky though (although that is limitation of the security key medium itself rather than the app).

But there is, and it supports OTP where if I remember correctly is a paid feature for Bitwarden. https://github.com/mssun/passforios

But who you gonna trust then? It's open source[1] at least, so you can always review it yourself.

But from "paranoid" point of view you can't verify is this is the same code used in app and all of currently available stores lacks in reproducible builds department. So it's always a tradeoff between ease of use and hassle.

[1]: https://github.com/mssun/passforios

https://github.com/mssun/passforios which also uses the safari password manager flow so its pretty seamless

passforios

Many Linux folks use pass, which I personally love for its simplicity and easy way to synch on different devices. There is an iOS (and an android) app.