I'm often on the move and sometimes have to use public computers at internet cafes, which isn't ideal. I'm wondering how to securely log into my accounts on these machines. I'm considering using passkeys stored in 1Password since no keylogger would be able to capture those passwords. However, the passkeys need to come from my phone, and currently, I can only supply them via USB, which doesn't feel secure at all due to the risk of spyware. I need access to platforms like GitHub and Google, and I'm contemplating creating a public GitHub account with a new SSH key for each session and then forking repositories when I return to my main computer. I'm a bit worried about keeping secrets like API keys safe. Any suggestions?
5 Answers
Consider using a YubiKey or a similar hardware security key. They plug into the USB port and are much harder to spoof or copy. However, I would advise against using public computers altogether. Even if your passwords come from 1Password, you can't be sure if someone else on that network is snooping on your traffic. The safest bet is to always use your own laptop with a VPN when accessing public connections.
I wouldn't recommend accessing any work-related items on public computers—just don’t do it. Your company might even have policies against it.
You might want to look into using a virtual desktop service like AVD. You can store all your important files there and just use the café computer as a terminal to access your virtual desktop. It's a safer alternative to working directly on a public machine.
That's a smart idea! It keeps your work contained and lessens the risk. Just make sure to use a strong password and two-factor authentication on your virtual desktop.
Honestly, if you're in a pinch, just go to an electronics store and buy a laptop. Don't trust someone else's device for anything important, and definitely keep your own laptop safe from others.
Try tunneling into your own network with 2FA enabled and then use SSH to access your workstation. It adds an extra layer of security when working from a public computer.
Yeah, doing this could definitely get you in trouble at most companies. Better to err on the side of caution!