TrustRadius Insights for Yubico YubiKeys are summaries of user sentiment data from TrustRadius reviews and, when necessary, third party data sources.
Pros
Streamlined Login Process: Users highlight Yubico YubiKey's streamlined login process. The process significantly reduces multifactor authentication time from up to 30 seconds to less than a second. This efficiency has been highlighted as a key benefit by many users who value quick and hassle-free access to their accounts.
Remote Document Signing: The ability to sign documents remotely using certificates stored on Yubico YubiKeys is highly valued by users, offering convenience and flexibility in document signing from any location. This feature enables users to securely sign important documents without being physically present, enhancing productivity and workflow efficiency.
High-Security Features: Users commend the high-security features of the Yubico YubiKey, such as storing a number of private keys, and providing superior capabilities compared to other security key brands. The robust security measures implemented in the device give users peace of mind regarding the security of their sensitive information and systems.
We use YubiKeys for special use cases that require elevated authentication, such as highly privileged accounts or breakglass access.
Pros
Easy to obtain
Easy to use
Good security when combined with PIN or biometric
Cons
Nothing jumps to mind. They do their use case well.
Cost is high, could be cheaper
Likelihood to Recommend
Personally, I prefer not to have to manage large scale deployments of physical devices but they work well for specialized use cases where additional security is required.
VU
Verified User
Manager in Information Technology (10,001+ employees)
Yubico YubiKeys are used throughout our organization, and I use them in my personal life to solve the challenges of both very strong authentication (often privileged) and portable authentication (FIDO in my pocket). Through a combination of WebAuthn credentials and X509 credentials, Yubico YubiKeys are the backbone of our most secure authentication scenarios.
I began using Yubico YubiKeys with the first gen and Yubico OTPs, but the FIDO Alliance has driven Yubico YubiKeys to be a premier tool in a broader mixed-security strategy, where secure hardware keys are used for privileged or portable secure authentication, or in step up (PAM) scenarios.
Pros
The durability and reliability of the Yubico YubiKeys is unmatched, making me feel safe to carry it with me on a keychain and have it accessible.
I'm confident in the hardware security of the Yubico YubiKeys, knowing that the key material is well protected and that tampering with the key would leave obvious traces. This makes key revocation decisions intuitive.
The ease of use of the Yubico YubiKeys for power users like myself is unmatched, and easy to train "less power" users on. The broad platform compatibility that Yubico was essential to is a huge driver here.
Cons
A more simple interface for managing resident keys would be helpful, making it easier to free up a slot when a key is no longer needed. But the core of WebAuthn makes this a challenge.
Color options would be nifty, not just aesthetically but also operationally. Having a "red key" for privileged would be helpful.
Likelihood to Recommend
Yubico YubiKeys will likely always be my default recommendation for hardware security keys. It's well suited for environments where key portability is necessary, and for privileged environments where step-up or separate authentication hardware benefits the situation. For example, I can step up my Microsoft rights through PIM, but I'm required to use a Yubico YubiKey (AAGUID filter) even if I'm already using Windows Hello. This means that accessing my workstation doesn't grant rights, accessing my device AND my Yubico YubiKey does.
I wouldn't necessarily recommend deploying Yubico YubiKeys to entire user populaces unless the situation calls for it (shared workstations, compliance environments, etc.). This is primarily centered around user training (which is a low bar, but still different), and dealing with loss (you'll want to budget for a % of key loss and be ready to rapidly issue replacements).
VU
Verified User
Director in Professional Services (1001-5000 employees)
YubiKeys allows us to manage our multiple authentication tokens quickly and easily. I'm in the federal space so it's wonderful to be able to shift to this platform and not have to worry about legacy PIV\CAC cards anymore. This is driving adoption and gives YubiKeys greater visibility across federal agencies as they are looking for alternatives.
Securing sensitive applications for users that do not have or cannot use a mobile device, or that is need a hardware protected device. YubiKeys will also function for desktop MFA and will also be used by IT Administrators that have extra sensitive applications. YubiKeys are also used for accessing VPN when soft tokens are too slow or time out.
Pros
Security
Multifactor
Encrypted passwords
Cons
Expense
Biometrics
resiliency
Likelihood to Recommend
Ease of use after configuration has been a big plus. Additional hardware protected security features is also a plus. However, users tend to lose or break them in certain situation.
VU
Verified User
Professional in Information Technology (1001-5000 employees)
When our company started implementing MFA, we needed to use our mobile phones to confirm our second factor. Yes, it worked, but it was a hassle getting your phone out of your pocket, especially if you were seated. Then we purchased some Yubikeys. It was so convenient to set it up and just touch the Yubikey for your second factor. Leveraging the long touch was also very helpful to reduce the accident activations.
Pros
Providing a second factor authentication.
Yubikey has two slots so it can be configured for two environments.
Long touch reduces accidental activation.
Cons
It would be nice to have a cover to prevent accident activation.
Likelihood to Recommend
The Yubico YubiKeys are well-suited to environments that need Multi-Factor Authentication (MFA). They are easy to configure and set up for use. The two slots are very helpful so that one YubiKey can be configured for two environments (e.g., production and non-production). The long touch also prevents accidental activation.
VU
Verified User
Project Manager in Information Technology (10,001+ employees)
We use Yubico YubiKeys to secure the administrator credentials for our domains and for DNS administration. Since these credentials are very sensitive, it provides more peace of mind knowing that the risk of being phished or brute forced is virtually eliminated.
Pros
Provides very effective MFA for our accounts.
Prevents phishing attacks.
Prevents brute force attacks.
Cons
Provide more integrations for services - particularly financial services (banks, credit cards, etc).
Likelihood to Recommend
We use GSuite. Yubico YubiKeys integration is a breeze.
VU
Verified User
Director in Information Technology (11-50 employees)
No I have one personally, I use it to secure access to my accounts including GitHub and email. it's a good tool and offers peace of mind. That there is no way for someone to access my account without the key. I'd recommend to others in org to get the product
Pros
Security
Looks good
Attaches to key ring
Cons
More colours
More integrations
Find my yubikey via bluetooth
Likelihood to Recommend
Access to secure assets like GitHub and AWS it's particular good in these scenarios, and I'd recommend it to anyone using these tools, particularly with elevated access. To be honest it's also fine for the average user too, in a security conscious company. It's less good for mobile access to products.
We're using it to streamline user authentication. We're currently using it for application security, but we're looking to enable it for desktop login as well. And that's our biggest use case right now is streamlining our logins to our systems.
Pros
It streamlines the login process where in past with multifactor authentication, each phase took up to 30 seconds. Adding quite a bit of time to the user experience, we're able to reduce that to less than a second.
Cons
So interestingly, with the nano devices that tend to stay in the computers, users are always accidentally hitting it and it will just pop up a random text string in whatever they're working on. So a way to add an easier way to add a delay into the device. Recognizing a touch.
Likelihood to Recommend
It's great for streamlining operations. When you have users that tend to struggle with technology, the concept behind the product is incredibly simple. It's plugged in, you touch it, and you're finished.
VU
Verified User
Vice-President in Information Technology (1-10 employees)
The entire engineering org has to actually use the Yubico YubiKeys primarily because it acts as a second-factor authentication and we don't have to use the text message option and this is much more secure. You basically put it in and it generates the code for you. So all access to all company systems is governed by two-factor authentication and Yubico YubiKeys access is the second factor for us.
Pros
So as I said, the second-factor authentication that it does is really well. The response time is really good and all you have to do is just enter the second factor code and that's about it. Right? So that's the good part about using Yubico YubiKeys.
Cons
Occasionally, once or twice it might happen that I would press the key, but it'll not detect that I pressed the key. So I'd have to press it again, but that's just occasionally, sometimes. So maybe even if the key was a little bit bigger and I've detected that, I would've pressed it. But apart from that, I think it's pretty good.
Likelihood to Recommend
I think, as I said, it's perfectly suited for second-factor authentication where all you have to do is a security team registers the key and you put it in your laptop and then you use it as a second factor. I think that's the best use case governing all access to making it a mandatory second factor so not relying on your cell phone or authenticator app, you just have this hardware thing which is much more secure and you can carry it with you as well when you are traveling.
