SecureAuth IdP vs. Yubico YubiKeys

SecureAuth is a good solution for companies looking for an in-house solution that can be managed by your internal technical resources. It is a good solution for new companies that are looking for a more secure authentication application to deploy to their staff

Incentivized

YubiKeys are incredibly effective for protecting against phishing attacks, as they require physical interaction and can't be remotely compromised. They're ideal for safeguarding high-value targets (executives, IT admins, those handling sensitive data), enhancing remote access security, and often help meet industry compliance regulations. However, the initial hardware cost may be a concern for large-scale deployments with many low-risk users. Users prone to losing small items or scenarios involving older, incompatible systems might pose logistical challenges. Nonetheless, YubiKeys remain robust when addressing phishing-based attacks and securing privileged accounts. Consider a targeted rollout balancing security gain against potential hardware costs and user needs.

Incentivized

• Security token for Microsoft authentication.
• Single sign on enabled for our organization.
• Simplifies the log in for our employees.

Incentivized

• Provides additional factors for authenticating against critical systems.
• Significantly reduces the chance of a successful phishing attempt.
• Can function as your primary credential for passwordless authentication.
• Extremely durable - I've had the same Yubikeys in use for years.
• Cross-platform - can be used on all mainstream operating systems and mobile devices.

Incentivized

• We had some difficulty enabling SecureAuth as our only authentication tool.
• The offline authentication feature was troublesome at times.
• Enrollment was a little cumbersome for some employees.

Incentivized

• I'd feel better if the key were a little more solidly built - it feels a little flimsy
• The design could also use a cap for the connection - I'm nervous having it on my key chain and users have mentioned the same concerns.
• There seems to be some cracks forming in the support for security keys which is starting to mitigate the usefulness across an entire ecosystem.

Incentivized

I give slightly better than average rating because of the complexity in using a Yubikey. It is not as easy as native push notifications for 2FA products, however, it provides much better strength. Rating this higher or lower would be a disservice to people reading this review. If you are in the market for a hardware 2FA tool, Yubikey will be a great asset in your toolbox.

Incentivized

simple to use and keep on hand to deploy/use

Incentivized

its instantaneous!

Incentivized

SecureAuth was reasonable solution that enables our organization to securely manage our single sign-on and multi-factor authentication controls by our technology department. The product was easy to install and maintain, and provided our employees a layer of security that was on par with other industry leading solutions

Incentivized

Duo and Yubico YubiKeys actually work very well together. We have chosen to use these two products together to make safe and secure MFA (including Passwordless) available to all users. The ease of use that Duo allows for both OTP import and WebAuthn enrollment makes it possible for modern and legacy applications to be protected by Duo MFA via Yubico YubiKeys as the second factor.

Incentivized

deployment is simple and the complex hardware is made simple.

Incentivized

• Flexible terms allowed us to leverage SecureAuth over multiple years.
• SecureAuth allowed us to get into this area of security at a reasonable price point.
• SecureAuth was able to scale as our company grew at a reasonable cost.

Incentivized

• It provides security that allows me to feel confident and peace of mind that my account is really hard to hack
• Easy ROI since it would be really expensive if my account were hacked
• It's easy and fast to use, so it doesn't slow me down when traveling.

Incentivized