Yubico YubiKeys

I've been a fan of Yubico YubiKeys for years now. I started out using them on a personal level for MFA with LastPass, and today we use them for practically everything at the office. They work great as a smart card replacement for login to Windows using their PIV functionality, and now they make up one of the most secure ways to access Microsoft 365 as a security key. Their flexibility and physical reliability are unmatched for a device of their kind. We once had someone's dog swallow a YubiKey by accident, and, believe it or not, after washing it off once it came out the other end, it was still functional. If that doesn't speak to how indestructible they are, I don't know what would.

Whenever I log into a new computer, I value and appreciate my Yubico YubiKeys as a deep security layer to our company's protocol. The physical key is solid and is, what I feel, indestructible since I carry it on my key chain and it always works. I feel it's best method available to prevent hacking and unauthorized access to my business.

Our use of Yubico YubikKeys exceeds 8 years. Primarily, our need is to protect client based software and data that reside on portables, laptops and mobile phones. Our 6 keys ensures the office’s need to maintain HIPPA compliance and limits access by the unauthorized. i found that initial setup is straightforward but one has to adhere to the process. The first few keys took some time, but ongoing was easy. i highly recommend YubiKeys to ensure access control.

Yubico YubiKeys are a fantastic 2FA option. These little guys last forever, are fairly inexpensive, and offer a highly secure means of verifying that the access is authorized. I own several keys in case I need a backup, but I've yet to lose one, or see one fail. Been using the same Yubico YubiKey for a decade...

Yubikeys are integrated with Userlock to provide 2FA for high risk users on a local active directory account. Also leveraged for a few 2FA functions on various websites. Stores multiple keys on one device making it a one stop shop for all our 2FA needs. Impressively durable during testing as users are quite hard on their devices here. Sent them through the wash, ran them over with a car etc. during testing and have only had one broken and we're still trying to figure out how the user did it. The story just doesn't line up for how tough these devices are.

We are putting the solution in the hands of tomorrow's security leaders, introducing the potential impact by enabling Strong MFA and passwordless authentication. After years of Yubico's demonstrated value to the large MNCs I've served, securing IaaS, PaaS, and SaaS at scale, the collaboration with the non-profit that I serve only makes sense.

In my relatively small office, we use Yubico Yubikeys (specifically the 5C NFC) to secure access to the computers. I personally also use mine to secure our email server, our NAS that contains client files, and to secure our network & wifi routers. I opted to start using the Yubikeys because of the increase in cyber attacks and specifically the increase in ransomware attacks. Our state bar charges us with the requirement that we maintain competency in digital security and that we take take all necessary steps to protect client data and PII (like DOB, DL numbers, complete SSN, etc.). In the past I've noticed certain staff writing down their logins on post-it notes and either sticking them on their monitor or leaving them in the top desk drawer. I decided that rather than get after my staff and then try to monitor compliance, the Yubikeys were the way to go. Now even if they do leave their logins on a post-it note, no one will be able to access their computers without the physical key present. It wasn't a cheap solution, cheaper than a ransomware attack or having a client's PII compromised.

The business problem came from the requirement of MFA for remote users, where some were not comfortable using their personal cell phones to either receive text messages or install 3rd party verification applications. By supplying them with a YubiKey, we were able to achieve the standard of security we were looking for without requiring use of personal equipment.

YubiKeys are being used by a small part of people within the organization to act as a physical token for MFA.