Cyberark Conjur vs. Yubico YubiKeys

Cyberark Conjur is well-suited and includes the following: > Securing access to sensitive data in multi-cloud environments. > Providing secure access to secrets and credentials for 3rd party services and applications

Incentivized

YubiKeys are incredibly effective for protecting against phishing attacks, as they require physical interaction and can't be remotely compromised. They're ideal for safeguarding high-value targets (executives, IT admins, those handling sensitive data), enhancing remote access security, and often help meet industry compliance regulations. However, the initial hardware cost may be a concern for large-scale deployments with many low-risk users. Users prone to losing small items or scenarios involving older, incompatible systems might pose logistical challenges. Nonetheless, YubiKeys remain robust when addressing phishing-based attacks and securing privileged accounts. Consider a targeted rollout balancing security gain against potential hardware costs and user needs.

Incentivized

• Provide allow-list
• verifying authority
• validate access

Incentivized

• Provides additional factors for authenticating against critical systems.
• Significantly reduces the chance of a successful phishing attempt.
• Can function as your primary credential for passwordless authentication.
• Extremely durable - I've had the same Yubikeys in use for years.
• Cross-platform - can be used on all mainstream operating systems and mobile devices.

Incentivized

• Searching containers can be difficult if you're not sure which you're looking for.
• Initial authorization can be slow, specifically if the first instance failed.

Incentivized

• I'd feel better if the key were a little more solidly built - it feels a little flimsy
• The design could also use a cap for the connection - I'm nervous having it on my key chain and users have mentioned the same concerns.
• There seems to be some cracks forming in the support for security keys which is starting to mitigate the usefulness across an entire ecosystem.

Incentivized

I give slightly better than average rating because of the complexity in using a Yubikey. It is not as easy as native push notifications for 2FA products, however, it provides much better strength. Rating this higher or lower would be a disservice to people reading this review. If you are in the market for a hardware 2FA tool, Yubikey will be a great asset in your toolbox.

Incentivized

simple to use and keep on hand to deploy/use

Incentivized

its instantaneous!

Incentivized

Cyberark Conjur has been a great asset to our company as it is a one stop shop that holds individuals, teams, departments, and the entire company accountable for the safety network. Not only do you have to be authorized to access Cyberark Conjuryou have to reauthorize to open, copy, or see individual passwords or accounts leaving a cyber trace of all your actions. There's no way to accidently get into something you're not supposed to be in.

Incentivized

Duo and Yubico YubiKeys actually work very well together. We have chosen to use these two products together to make safe and secure MFA (including Passwordless) available to all users. The ease of use that Duo allows for both OTP import and WebAuthn enrollment makes it possible for modern and legacy applications to be protected by Duo MFA via Yubico YubiKeys as the second factor.

Incentivized

deployment is simple and the complex hardware is made simple.

Incentivized

• Before Cyberark we put passwords in a spread sheet - leaving exposure to theft.
• Gives security compliance to our company
• Keeps company and teams secure and safe.

Incentivized

• It provides security that allows me to feel confident and peace of mind that my account is really hard to hack
• Easy ROI since it would be really expensive if my account were hacked
• It's easy and fast to use, so it doesn't slow me down when traveling.

Incentivized