Yubico YubiKeys

The CFO loves our security improvements as they've helped to reduce the cost of our cybersecurity insurance. The CFO also hates the security improvements because they add an additional layer of overhead and end users don't like the need to log in so frequently.

Assigning YubiKeys to users has proven to be a great opportunity to reinforce the importance of security and proper access controls in our organization. The act of handing someone a physical security key conveys that their role comes with significant trust and responsibility. When issuing YubiKeys, I take time to explain why multi-factor authentication is crucial for protecting their accounts and our most sensitive data. The users understand that the YubiKey is not just an extra step but a critical layer of protection against compromise. Deploying the YubiKeys makes access security feel tangible and personal to each employee. They appreciate that we've invested in their authentication to prevent their accounts from getting compromised. I've found that assigning a YubiKey gives people a sense of ownership over security and motivates them to be vigilant. Our users feel empowered to be part of the solution by properly using their key. It puts them directly in control of protecting their access.

Yubico YubiKeys provides a very easy mental model for how employees should think of Yubico YubiKeys and the responsibilities involved. We simply tell everyone to treat their YubiKeys as if they were a physical key to the office. Besides the introduction of passkeys, we have had very little push back or issues with them over all.

They are loved by people who don't want to use a smart device for MFA. That's about it. Most people would rather use their smart devices. So that's a limited use case. Having a backup MFA device to get you in quickly after losing your smart device is priceless. Bravo.

There is an initial learning curve, however, after some training, all users have been happy with the way Yubico YubiKeys work and have integrated them into their daily routine.

Whether it is WebAuthn or OTP, Yubico YubiKeys allows a single tap of a button to use MFA. With WebAuthn, this has changed the game as we also have a Passwordless authentication workflow and, with the use of FIDO2-compliant YubiKeys, makes the fastest and most secure login experience possible for our users.

We initially implemented Yubico YubiKeys as a replacement to our OTP MFA solution, due to the old solution no longer satisfying our security requirements. We started by using them in the smart card role for cert-based authentication, but our users were so positive when we rolled them out, that we soon expanded to using them as FIDO2 devices for other systems. Users are pushing us to expand the number of systems that are Yubico YubiKey-enabled.

Our users love it, as it provides a simplified method to log in to their computers each day without having to deal with the complex password requirements that are necessary when logging in without a Yubico YubiKey. The way that we have things set up, they *can* log in without their YubiKey, however, to do so they have to remember a long complex password, and then utilize DUO for MFA. Most of them would rather drive back home and get their forgotten YubiKey than do that.

It is always seen as a pain and "just something else we have to do". However once users get used to them, they are generally well received once staff is able to see how it makes their life easier. Since the Yubico YubiKeys can be safely left plugged into a device, touching it to validate the MFA is much easier then pulling out a phone, going to an Authenticator App, and typing in a code.

As soon as our corporate use of Google for Business began requiring MFA, employees were using their own money or office budgets to buy Yubico Yubikeys.

The YubiKeys remain the easiest and most secure way for our company to access our sensitive documents and account access without compromising time or overly-expensive solutions. It's also helped us keep our insurance costs low.

Users have been very receptive to the YubiKeys. They are far less cumbersome than RSA tokens.

Users like the Yubico YubiKeys - they are simple to use and require nearly zero training.

we have young and old salespeople... the older folks like the simplicity and the younger associates move quickly and no intimidated... they can pay closer attention to the custoemer cues and transparent to the consumer.

They love the devices compared to the RSA devices which the screen gets old or the numbers get distorted.

Medical providers are not alway on the same technological path. This product creates uniformity. Muliple passwords and their software management software are significantly simplified with the Yubico YubiKey system

Most of our employees were not aware that this technology even existed. Once we have a proper setup for them, they use them exclusively for work and are very well received. A number of people have requested information on purchasing YubiKeys for home use.

Unfortunately, end users don't want to have to utilize a second factor authentication implement, however administration supports its use completely.

Everyone in the org who uses Yubico YubiKeys has zero trouble with these devices, and I don't think any have had to be replaced due to damage. The set up was trivial for even the most luddite users in our org, and I've never heard a complaint from the current users.

Users don't love having additional items to manage and 2FA is considered a chore. Compared to other 2FA solutions, it's low enough extra burden the users haven't revolted and mostly accepted their lot of having to use 2FA. The few security minded folks are quite excited but don't expect miracles. Users hate anything that adds extra steps to their day and would rather have the business ransomwared than have any inconvenience.

I helped setup our Yubikey solution over 5 years ago and it was mostly set it and forget it once we understood how the process worked to provision/re-provision them. From the end user standpoint, it's extremely simple so there are no concerns there as almost anyone can figure it out on their own.

Yubico has been very well received by the ease of use and functionality.

I've observed the most technical embrace the use of YubiKeys, and the least technical fully commit to Strong MFA due to the YubiKey. I advise a community with a generation that didn't grow up with personal computing and needed to learn how to enable MFA. Imagine some of the most vulnerable to phishing, ransomware, and social engineering. When I put the YubiKey in their hands with the message of what it means and how they can use it, I'm thrilled when I see them weeks later, and they share their own stories of enabling Strong MFA within their most vulnerable accounts.

We have helped implement Yubikeys in all types of industries and it is very easy to get a new user familiar with them

Users thank me for their Yubikeys!