Yubico YubiKeys

I'd say it's very appropriate to secure your cloud access and also for login, it's less appropriate for local login. I'd say logging into Windows computers can be hard to do correctly. And on Mac computers, it's a no go as far as I can tell.

It's well suited. I think the only issue is you need to have the key and if you lose it, then maybe there is a potential issue. I think those are the only concerns I have.

We've been using this for one of our products where the requirement is AL3 where you can only use the web certified security gear and it offers the highest level of security and authentication. So I think the key that Yubico YubiKeys is providing is the best for that use case. For less appropriate, I think right now, I mean with pass keys, the sync pass keys becoming a thing. I don't know how for a consumer market you become a person would not want to keep a security key. It depends on the level of security that you're looking for. So for a consumer market for probably my social medias, I won't use a security key. I probably sync it to the cloud.

Server authentications is where we don't see much of a use case. So far my primary role and also the use cases I have seen so far is using the laptop and authenticating the apps in the laptop. So those are the two major use cases I have seen. But this can be expanded to servers as well because I'm not in the infrastructure area, so I do not know whether you have it or not. But that's one thing I feel like you can look into expanding

I like to use it as another factor in authentication. I think it's really great that way. It's supported by industry standards, open standards.

Anything where you value the security of access to data? Financial data, whether it's personal or professional, is highly useful because it provides us with that extra layer of physical security protection. If the data is something you're signing up for where you don't really care, it doesn't really matter at that point if it's a throwaway account on an internet site. But anything where security is important, definitely.

Yubikeys are good for MFA and ensuring specific access to some of our resources.

It is great for secure authentication for workers who physically come into the office and can pick up a physical key. Distribution is a significant challenge for remote workers; ideally, a soft token approach similar to competitors would be helpful to deal with this challenge. Also, escrow of keys so that credentials can move to a new key when the key is lost.

If a service supports security keys, I always enable it and enroll my Yubico YubiKeys. On the other hand, I prefer passkeys if they are supported and allowed, which is the case for our enterprise SSO. However, even in this case, I use Yubico YubiKeys for new platforms / browsers or as a backup.

It just works. I've been using the devices for several years and it just works. They are easy to add to multi accounts.

It is easy to set up. But when I need the OTP code, it is not available, and it is annoying to switch it off.

It's great for security and ensuring that your accounts are essentially hack proof. One problem is traveling, if you leave your key in your hotel room or even back at home, you are pretty stuck. I would love to see a Yubico YubiKeys form factor that's designed to fit easily into wallets, such as a credit-card form factor.

MFA

Anywhere MFA is use Yubico YubiKeys are well suited, assuming the mechanism can handle it.
Less appropriate are really just legacy type systems that don’t even allow MFA implementation at all.

Well suited for any account that needs secured with MFA that supports it. Not well suited for homegrown applications

For me the best device to validate the right use of credentials, free of fishing

Very reliable. Variety of options. Great customer support

I trust Yubico YubiKeys to keep my logins safe and protect me from compromise and lockout. Over the years I have made sure to gather multiple Yubico YubiKeys to have an extra fail safe.

Yubico YubiKeys are phenomenal for scenarios where phishing resistant authentication is needed; and especially for areas where mobile phones are not appropriate.

YubiKeys are appropriate everywhere. There are no reasons not to use them for every environment, as they’re a perfect option and remove the need for a phone to be the primary login option. They have a broad range of functionality, work with most sites (even more if you federate an SSO with Microsoft 365, or another IDP that supports FIDO keys), and can even be utilized as a smart card for Windows and/or Mac logins.

For securing your most sensitive accounts, systems, and data that require strong access controls, YubiKeys offer excellent protection by strengthening your organization's authentication strategy. Rather than relying solely on passwords or mobile-based two-factor methods for your highest-risk user logins, YubiKeys provide rock-solid multi-factor authentication tied to a tamper-resistant physical device. This eliminates many of the vulnerabilities associated with passwords and mobile authenticators alone. By requiring both a password and the possession of a YubiKey for access, you can drastically reduce the risks of unauthorized logins, even in the event of password leaks. YubiKeys also provide phishing protection by cryptographically verifying legitimate sites, preventing spoofing attacks.For infrastructure like production servers, databases, and network equipment where compromised access would be catastrophic, YubiKey-secured logins should be mandatory for administrators and engineers. Similarly for business-critical software as a service accounts and registrar/DNS logins where hijacking could shut down the business.

They are a great backup MFA device because it isn't safe to only have one MFA token. They are also good for anyone who doesn't want to use a smartphone as their MFA device. They have a FIPS-validated solution for anyone who works in government or government contracting.

Yubico YubiKeys are great for hybrid applications that support both modern and legacy authentication methods. For example, for web-based applications that are federated behind an IdP, the Yubico YubiKey WebAuthn (FIDO2) mechanism is the gold standard of phishing-resistant MFA. The same Yubico YubiKey (if a supported model) can also be used as an OTP hardware token so that the user does not have to use 2 different roaming authenticators for logging into all their applications. One YubiKey to rule them all!

Yubico YubiKeys shines when used as part of a larger MFA solution. It provides a very flexible component, however, it remains dependent on the infrastructure and environment in which it is deployed.

I love using Yubico YubiKeys everywhere it is supported. I believe it provides the best security and ease of use.

Unlike SMS or Authenticator based MFA, Yubico YubiKeys provide phishing resistance to protect against MITA. It also provides easy passwordless login which eases the user flow and decreases the need for password resets