{"id":6080,"date":"2019-05-15T09:00:42","date_gmt":"2019-05-15T09:00:42","guid":{"rendered":"https:\/\/nextcloud.com\/?p=6080"},"modified":"2019-05-15T09:00:42","modified_gmt":"2019-05-15T09:00:42","slug":"nitrokey-and-nextcloud-collaborate-on-securing-private-clouds","status":"publish","type":"post","link":"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/","title":{"rendered":"Nitrokey and Nextcloud collaborate on securing private clouds"},"content":{"rendered":"

Nitrokey develops fully open and auditable security USB keys for two-factor authentication, cryptographic key storage and much more. Their devices are developed and produced in Germany, primarily in Berlin. No overseas manufacturing is used to ensure quality and avoid hardware security breaches. The installed firmware can even be exported and verified, preventing attackers from inserting backdoors into products during shipping. Nitrokey has many other unique features, like hidden encrypted storage for plausible deniability at border checks. Learn about their offering on their website.<\/a><\/p>\n

Self-hosting a Nextcloud gives users 100% control over their data, protecting their privacy. But privacy doesn\u2019t exist without security and Nextcloud offers many security features like two-factor authentication (2FA), brute force protection, server and client side encryption and much more. Nitrokey\u2019s security and encryption devices are a perfect match.<\/p>\n

\n
\"Nitrokey<\/a>
\nNitrokey in action.<\/div>\n
\"Logging<\/a>
\nNitrokey used for second factor in Nextcloud.<\/div>\n<\/div>\n

Second-Factor Keys<\/h2>\n

The Nitrokey Pro 2 and Nitrokey Storage 2 devices have been verified to work correctly with Nextcloud\u2019s one-time passwords for secure two-factor authentication (2FA). This protects users\u2019 accounts in the event of compromised passwords. Furthermore the USB keys feature a password manager, a cryptographic key store for email encryption and SSH administration. In addition the Nitrokey Storage 2 contains an encryption mass storage drive with the option of hidden volumes.<\/p>\n

\n
\"Setup<\/a>
\nSetup in Nextcloud.<\/div>\n
\"Nitrokey<\/a>
\nNitrokey configuration.<\/div>\n<\/div>\n

Password-Less Login Experience<\/h2>\n

FIDO2 authentication makes it possible to replace insecure and complicated password logins with secure and fast login experiences across websites and apps. FIDO2 uses the W3C\u2019s Web Authentication specification (WebAuthn) and FIDO\u2019s Client-to-Authenticator Protocol (CTAP2), which together let users use a device to easily authenticate to online services \u2014 in both mobile and desktop environments.<\/p>\n

In simpler terms, to log in to your Nextcloud (or another webservice) you just insert your Nitrokey and click a button or two to approve the login.<\/p>\n

Nitrokey and Nextcloud are both starting to work on FIDO2 support and have agreed to collaborate on this, making sure Nitrokeys can be used to seamlessly log in to Nextcloud systems. More news is likely to come during the Nextcloud Conference in Berlin<\/a> later this year.<\/p>\n

Enterprise key management<\/h2>\n

Nitrokey and Nextcloud will explore further collaboration, seeking ways to provide enterprises and private users with even better, more advanced security measures in the future. One of these areas are Nextcloud installations in enterprises providing end-to-end encryption and demanding a secure way to store cryptographic keys. This is where Nitrokey HSM can provide a central key store to securely store keys and at the same time enable the organization protected access to their keys. Here Nitrokey HSM\u2019s m-of-n access scheme allows to define a group of authorized administrators and to protect the keys against a single malicious administrator. Also, encrypted key backups are essential in order to fulfill compliance and availability requirements.<\/p>\n","protected":false},"excerpt":{"rendered":"

Nitrokey develops fully open and auditable security USB keys for two-factor authentication, cryptographic key storage and much more. Their devices are developed and produced in Germany, primarily in Berlin. No overseas manufacturing is used to ensure quality and avoid hardware security breaches. The installed firmware can even be exported and verified, preventing attackers from inserting […]<\/p>\n","protected":false},"author":2,"featured_media":6095,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"publish_to_discourse":"0","publish_post_category":"22","wpdc_auto_publish_overridden":"","wpdc_topic_tags":"","wpdc_pin_topic":"","wpdc_pin_until":"","discourse_post_id":"152379","discourse_permalink":"https:\/\/help.nextcloud.com\/t\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/53331","wpdc_publishing_response":"","wpdc_publishing_error":"","footnotes":""},"categories":[11,7,18,13],"tags":[],"class_list":["post-6080","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-news","category-partner","category-security"],"acf":[],"yoast_head":"\nNitrokey and Nextcloud collaborate on securing private clouds - Nextcloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Nitrokey and Nextcloud collaborate on securing private clouds - Nextcloud\" \/>\n<meta property=\"og:description\" content=\"Nitrokey develops fully open and auditable security USB keys for two-factor authentication, cryptographic key storage and much more. Their devices are developed and produced in Germany, primarily in Berlin. No overseas manufacturing is used to ensure quality and avoid hardware security breaches. The installed firmware can even be exported and verified, preventing attackers from inserting […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/\" \/>\n<meta property=\"og:site_name\" content=\"Nextcloud\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Nextclouders\/\" \/>\n<meta property=\"article:published_time\" content=\"2019-05-15T09:00:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nextcloud.com\/wp-content\/uploads\/2019\/05\/nitrokey-authentication.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"1200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jos Poortvliet\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@nextclouders\" \/>\n<meta name=\"twitter:site\" content=\"@nextclouders\" \/>\n<meta name=\"twitter:label1\" content=\"Verfasst von\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jos Poortvliet\" \/>\n\t<meta name=\"twitter:label2\" content=\"Gesch\u00e4tzte Lesezeit\" \/>\n\t<meta name=\"twitter:data2\" content=\"2\u00a0Minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/\"},\"author\":{\"name\":\"Jos Poortvliet\",\"@id\":\"https:\/\/nextcloud.com\/de\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2\"},\"headline\":\"Nitrokey and Nextcloud collaborate on securing private clouds\",\"datePublished\":\"2019-05-15T09:00:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/\"},\"wordCount\":475,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/nextcloud.com\/de\/#organization\"},\"image\":{\"@id\":\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/nextcloud.com\/c\/uploads\/2019\/05\/nitrokey-authentication.jpg\",\"articleSection\":[\"Blog\",\"News\",\"Partner\",\"Security\"],\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/\",\"url\":\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/\",\"name\":\"Nitrokey and Nextcloud collaborate on securing private clouds - Nextcloud\",\"isPartOf\":{\"@id\":\"https:\/\/nextcloud.com\/de\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/nextcloud.com\/c\/uploads\/2019\/05\/nitrokey-authentication.jpg\",\"datePublished\":\"2019-05-15T09:00:42+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#breadcrumb\"},\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#primaryimage\",\"url\":\"https:\/\/nextcloud.com\/c\/uploads\/2019\/05\/nitrokey-authentication.jpg\",\"contentUrl\":\"https:\/\/nextcloud.com\/c\/uploads\/2019\/05\/nitrokey-authentication.jpg\",\"width\":1600,\"height\":1200},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/nextcloud.com\/de\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Nitrokey and Nextcloud collaborate on securing private clouds\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nextcloud.com\/de\/#website\",\"url\":\"https:\/\/nextcloud.com\/de\/\",\"name\":\"Nextcloud\",\"description\":\"Regain control over your data\",\"publisher\":{\"@id\":\"https:\/\/nextcloud.com\/de\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nextcloud.com\/de\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"de\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/nextcloud.com\/de\/#organization\",\"name\":\"Nextcloud\",\"url\":\"https:\/\/nextcloud.com\/de\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\/\/nextcloud.com\/de\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg\",\"contentUrl\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"Nextcloud\"},\"image\":{\"@id\":\"https:\/\/nextcloud.com\/de\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/Nextclouders\/\",\"https:\/\/x.com\/nextclouders\",\"https:\/\/www.linkedin.com\/company\/10827569\/\",\"https:\/\/youtube.com\/nextcloud\",\"https:\/\/www.instagram.com\/nextclouders\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/nextcloud.com\/de\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2\",\"name\":\"Jos Poortvliet\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\/\/nextcloud.com\/de\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g\",\"caption\":\"Jos Poortvliet\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Nitrokey and Nextcloud collaborate on securing private clouds - Nextcloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/","og_locale":"de_DE","og_type":"article","og_title":"Nitrokey and Nextcloud collaborate on securing private clouds - Nextcloud","og_description":"Nitrokey develops fully open and auditable security USB keys for two-factor authentication, cryptographic key storage and much more. Their devices are developed and produced in Germany, primarily in Berlin. No overseas manufacturing is used to ensure quality and avoid hardware security breaches. The installed firmware can even be exported and verified, preventing attackers from inserting […]","og_url":"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/","og_site_name":"Nextcloud","article_publisher":"https:\/\/www.facebook.com\/Nextclouders\/","article_published_time":"2019-05-15T09:00:42+00:00","og_image":[{"width":1600,"height":1200,"url":"https:\/\/nextcloud.com\/wp-content\/uploads\/2019\/05\/nitrokey-authentication.jpg","type":"image\/jpeg"}],"author":"Jos Poortvliet","twitter_card":"summary_large_image","twitter_creator":"@nextclouders","twitter_site":"@nextclouders","twitter_misc":{"Verfasst von":"Jos Poortvliet","Gesch\u00e4tzte Lesezeit":"2\u00a0Minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#article","isPartOf":{"@id":"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/"},"author":{"name":"Jos Poortvliet","@id":"https:\/\/nextcloud.com\/de\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2"},"headline":"Nitrokey and Nextcloud collaborate on securing private clouds","datePublished":"2019-05-15T09:00:42+00:00","mainEntityOfPage":{"@id":"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/"},"wordCount":475,"commentCount":0,"publisher":{"@id":"https:\/\/nextcloud.com\/de\/#organization"},"image":{"@id":"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#primaryimage"},"thumbnailUrl":"https:\/\/nextcloud.com\/c\/uploads\/2019\/05\/nitrokey-authentication.jpg","articleSection":["Blog","News","Partner","Security"],"inLanguage":"de","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/","url":"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/","name":"Nitrokey and Nextcloud collaborate on securing private clouds - Nextcloud","isPartOf":{"@id":"https:\/\/nextcloud.com\/de\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#primaryimage"},"image":{"@id":"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#primaryimage"},"thumbnailUrl":"https:\/\/nextcloud.com\/c\/uploads\/2019\/05\/nitrokey-authentication.jpg","datePublished":"2019-05-15T09:00:42+00:00","breadcrumb":{"@id":"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#breadcrumb"},"inLanguage":"de","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/"]}]},{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#primaryimage","url":"https:\/\/nextcloud.com\/c\/uploads\/2019\/05\/nitrokey-authentication.jpg","contentUrl":"https:\/\/nextcloud.com\/c\/uploads\/2019\/05\/nitrokey-authentication.jpg","width":1600,"height":1200},{"@type":"BreadcrumbList","@id":"https:\/\/nextcloud.com\/de\/blog\/nitrokey-and-nextcloud-collaborate-on-securing-private-clouds\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nextcloud.com\/de\/"},{"@type":"ListItem","position":2,"name":"Nitrokey and Nextcloud collaborate on securing private clouds"}]},{"@type":"WebSite","@id":"https:\/\/nextcloud.com\/de\/#website","url":"https:\/\/nextcloud.com\/de\/","name":"Nextcloud","description":"Regain control over your data","publisher":{"@id":"https:\/\/nextcloud.com\/de\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nextcloud.com\/de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"de"},{"@type":"Organization","@id":"https:\/\/nextcloud.com\/de\/#organization","name":"Nextcloud","url":"https:\/\/nextcloud.com\/de\/","logo":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/nextcloud.com\/de\/#\/schema\/logo\/image\/","url":"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg","contentUrl":"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg","width":"1024","height":"1024","caption":"Nextcloud"},"image":{"@id":"https:\/\/nextcloud.com\/de\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Nextclouders\/","https:\/\/x.com\/nextclouders","https:\/\/www.linkedin.com\/company\/10827569\/","https:\/\/youtube.com\/nextcloud","https:\/\/www.instagram.com\/nextclouders\/"]},{"@type":"Person","@id":"https:\/\/nextcloud.com\/de\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2","name":"Jos Poortvliet","image":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/nextcloud.com\/de\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g","caption":"Jos Poortvliet"}}]}},"featured_media_url":"https:\/\/nextcloud.com\/c\/uploads\/2019\/05\/nitrokey-authentication.jpg","_links":{"self":[{"href":"https:\/\/nextcloud.com\/de\/wp-json\/wp\/v2\/posts\/6080","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nextcloud.com\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nextcloud.com\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nextcloud.com\/de\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nextcloud.com\/de\/wp-json\/wp\/v2\/comments?post=6080"}],"version-history":[{"count":0,"href":"https:\/\/nextcloud.com\/de\/wp-json\/wp\/v2\/posts\/6080\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nextcloud.com\/de\/wp-json\/wp\/v2\/media\/6095"}],"wp:attachment":[{"href":"https:\/\/nextcloud.com\/de\/wp-json\/wp\/v2\/media?parent=6080"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nextcloud.com\/de\/wp-json\/wp\/v2\/categories?post=6080"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nextcloud.com\/de\/wp-json\/wp\/v2\/tags?post=6080"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}