Yubico YubiKeys

The Yubico YubiKeys are well-suited to environments that need Multi-Factor Authentication (MFA). They are easy to configure and set up for use. The two slots are very helpful so that one YubiKey can be configured for two environments (e.g., production and non-production). The long touch also prevents accidental activation.

I'd say it's very appropriate to secure your cloud access and also for login, it's less appropriate for local login. I'd say logging into Windows computers can be hard to do correctly. And on Mac computers, it's a no go as far as I can tell.

It's great for streamlining operations. When you have users that tend to struggle with technology, the concept behind the product is incredibly simple. It's plugged in, you touch it, and you're finished.

I think, as I said, it's perfectly suited for second-factor authentication where all you have to do is a security team registers the key and you put it in your laptop and then you use it as a second factor. I think that's the best use case governing all access to making it a mandatory second factor so not relying on your cell phone or authenticator app, you just have this hardware thing which is much more secure and you can carry it with you as well when you are traveling.

It's well suited. I think the only issue is you need to have the key and if you lose it, then maybe there is a potential issue. I think those are the only concerns I have.

It's appropriate when it serves as the extra two factor authenticator when I lose my phone. Less suitable, I don't know.

I think it's good for anyone who uses a computer to work. I guess anytime you need two-factor authentication in an environment where you have somewhere to plug in, it's useful. I guess it's hard for iPhones now because you need an extension or a different device, but soon, I mean with the iPhone 15 it'll be solved. I'm not sure.

I like to use it as another factor in authentication. I think it's really great that way. It's supported by industry standards, open standards.

Anything where you value the security of access to data? Financial data, whether it's personal or professional, is highly useful because it provides us with that extra layer of physical security protection. If the data is something you're signing up for where you don't really care, it doesn't really matter at that point if it's a throwaway account on an internet site. But anything where security is important, definitely.

I think whenever you're either a small team that works together in person or you're a company that has the resources to give each employee a Yubico YubiKeys, that's a great use case. I've found it's maybe not as great if you're working with freelancers that are remote because you don't know necessarily the lifespan of the freelancer. You may work with them for three months and then maybe you start working with a different freelancer. So to mail out Yubico YubiKeys for that very part-time freelance position is not necessarily the easiest. So in those cases, I've resorted to just syncing the two-factor codes and giving them a log into a password manager because that's much easier to onboard. So yeah, I guess that would be maybe one of the downsides is onboarding users, getting them started. But if you have a small team in person or you've got the resources, and you've got an IT department, then onboarding is not as much of an issue.

YubiKeys are ideal as a second factor in 2FA.

When traveling and trying to access your work laptop

For us high value targets that have sensitive access, it just makes sense to use Yubico YubiKeys. We feel comfortable with the solution and hardware. It’s super easy for everyone to use. They say the feel important having to use it like a spy sometimes. For our everyday user we have not deployed currently and are still trying to decide if it’s right for them due to the fact that we have many pieces of hardware lost with just their access entry NFC devices.

laptops and mobile

It is great for secure authentication for workers who physically come into the office and can pick up a physical key. Distribution is a significant challenge for remote workers; ideally, a soft token approach similar to competitors would be helpful to deal with this challenge. Also, escrow of keys so that credentials can move to a new key when the key is lost.

It just works. I've been using the devices for several years and it just works. They are easy to add to multi accounts.

Whenever you are logging in for security reasons

YubiKeys are well suited for enterprises desiring to utilize an improved MFA factor compared to less secure ones like SMS, Phone, or Email-based factors. YubiKeys may be difficult for users to understand and work with mobile devices for non-techies initially.

FIDO Authentication, web auth n, privileged user authentication, the only area it hasn't worked well was active directory authentication but that's due to issues with ADCS.

It's great for security and ensuring that your accounts are essentially hack proof. One problem is traveling, if you leave your key in your hotel room or even back at home, you are pretty stuck. I would love to see a Yubico YubiKeys form factor that's designed to fit easily into wallets, such as a credit-card form factor.

MFA

Very reliable. Variety of options. Great customer support

I keep a nano-c in my computer at all times and use it on as many systems as possible. I prefer to use it for logging into my Mac over the giving up my biometric details for a fingerprint.

TOTP and strong authentication

Yubico YubiKeys are well suited for FIDO authentication