Yubico YubiKeys

For us high value targets that have sensitive access, it just makes sense to use Yubico YubiKeys. We feel comfortable with the solution and hardware. It’s super easy for everyone to use. They say the feel important having to use it like a spy sometimes. For our everyday user we have not deployed currently and are still trying to decide if it’s right for them due to the fact that we have many pieces of hardware lost with just their access entry NFC devices.

Yubico YubiKeys are durable, lightweight, easy to use, support several authentication protocols, and have an enterprise management option.

Yubico YubiKeys are great for hybrid applications that support both modern and legacy authentication methods. For example, for web-based applications that are federated behind an IdP, the Yubico YubiKey WebAuthn (FIDO2) mechanism is the gold standard of phishing-resistant MFA. The same Yubico YubiKey (if a supported model) can also be used as an OTP hardware token so that the user does not have to use 2 different roaming authenticators for logging into all their applications. One YubiKey to rule them all!

I'd say it's very appropriate to secure your cloud access and also for login, it's less appropriate for local login. I'd say logging into Windows computers can be hard to do correctly. And on Mac computers, it's a no go as far as I can tell.

IT works well and meets our requirements.

The Yubico YubiKeys are well-suited to environments that need Multi-Factor Authentication (MFA). They are easy to configure and set up for use. The two slots are very helpful so that one YubiKey can be configured for two environments (e.g., production and non-production). The long touch also prevents accidental activation.

It's great for streamlining operations. When you have users that tend to struggle with technology, the concept behind the product is incredibly simple. It's plugged in, you touch it, and you're finished.

I think, as I said, it's perfectly suited for second-factor authentication where all you have to do is a security team registers the key and you put it in your laptop and then you use it as a second factor. I think that's the best use case governing all access to making it a mandatory second factor so not relying on your cell phone or authenticator app, you just have this hardware thing which is much more secure and you can carry it with you as well when you are traveling.

It's well suited. I think the only issue is you need to have the key and if you lose it, then maybe there is a potential issue. I think those are the only concerns I have.

We've been using this for one of our products where the requirement is AL3 where you can only use the web certified security gear and it offers the highest level of security and authentication. So I think the key that Yubico YubiKeys is providing is the best for that use case. For less appropriate, I think right now, I mean with pass keys, the sync pass keys becoming a thing. I don't know how for a consumer market you become a person would not want to keep a security key. It depends on the level of security that you're looking for. So for a consumer market for probably my social medias, I won't use a security key. I probably sync it to the cloud.

Server authentications is where we don't see much of a use case. So far my primary role and also the use cases I have seen so far is using the laptop and authenticating the apps in the laptop. So those are the two major use cases I have seen. But this can be expanded to servers as well because I'm not in the infrastructure area, so I do not know whether you have it or not. But that's one thing I feel like you can look into expanding

It's appropriate when it serves as the extra two factor authenticator when I lose my phone. Less suitable, I don't know.

Just a replacement of MFA

I think it's good for anyone who uses a computer to work. I guess anytime you need two-factor authentication in an environment where you have somewhere to plug in, it's useful. I guess it's hard for iPhones now because you need an extension or a different device, but soon, I mean with the iPhone 15 it'll be solved. I'm not sure.

I like to use it as another factor in authentication. I think it's really great that way. It's supported by industry standards, open standards.

Anything where you value the security of access to data? Financial data, whether it's personal or professional, is highly useful because it provides us with that extra layer of physical security protection. If the data is something you're signing up for where you don't really care, it doesn't really matter at that point if it's a throwaway account on an internet site. But anything where security is important, definitely.

I think whenever you're either a small team that works together in person or you're a company that has the resources to give each employee a Yubico YubiKeys, that's a great use case. I've found it's maybe not as great if you're working with freelancers that are remote because you don't know necessarily the lifespan of the freelancer. You may work with them for three months and then maybe you start working with a different freelancer. So to mail out Yubico YubiKeys for that very part-time freelance position is not necessarily the easiest. So in those cases, I've resorted to just syncing the two-factor codes and giving them a log into a password manager because that's much easier to onboard. So yeah, I guess that would be maybe one of the downsides is onboarding users, getting them started. But if you have a small team in person or you've got the resources, and you've got an IT department, then onboarding is not as much of an issue.

I think this product is well suited for any enterprise that wants to roll out pass keys because it's fully compliant with that. And any company that's worried about password risk, this is a good replacement for that.

YubiKeys are ideal as a second factor in 2FA.

When traveling and trying to access your work laptop

laptops and mobile

I've used your Security keys for over 5 years for personal and Corp engagement and implementation.
Love the service, the easy config and bulk provisioning.

When I started needing to use my iOS / Android devices more and more, I found my USB-A YubiKey less than helpful.

It is great for secure authentication for workers who physically come into the office and can pick up a physical key. Distribution is a significant challenge for remote workers; ideally, a soft token approach similar to competitors would be helpful to deal with this challenge. Also, escrow of keys so that credentials can move to a new key when the key is lost.

If a service supports security keys, I always enable it and enroll my Yubico YubiKeys. On the other hand, I prefer passkeys if they are supported and allowed, which is the case for our enterprise SSO. However, even in this case, I use Yubico YubiKeys for new platforms / browsers or as a backup.