Yubico Yubikeys Get the Job Done
December 15, 2023
Yubico Yubikeys Get the Job Done
Score 9 out of 10
Vetted Review
Verified User
Modules Used
- YubiKey 5 Series
Overall Satisfaction with Yubico YubiKeys
Yubikeys are integrated with Userlock to provide 2FA for high risk users on a local active directory account. Also leveraged for a few 2FA functions on various websites. Stores multiple keys on one device making it a one stop shop for all our 2FA needs. Impressively durable during testing as users are quite hard on their devices here. Sent them through the wash, ran them over with a car etc. during testing and have only had one broken and we're still trying to figure out how the user did it. The story just doesn't line up for how tough these devices are.
- Consistent delivery of 2FA keys
- Durable as all heck
- Easy configuration with matching software provider
- Works just fine with Windows built in 2FA if needed
- Could user a better management application
- Mindriver is a bit of a pain if you need it
- 2FA for on premise AD
- NCUA likes them
- Users don't love an extra step
- Reduces risk. Annoyed the heck out of an internal pentester
Yubikeys significantly reduce the amount of exposure to account takeover. This also satisfies regulatory requirements for 2FA on specific high risk accounts. As an added bonus, most large companies support integration of Yubikeys into their online applications further increasing security and reducing attack surface. New Yubikeys also support NFC 2FA making for additional security for phones where plugging in a key isn't really an option.
Users don't love having additional items to manage and 2FA is considered a chore. Compared to other 2FA solutions, it's low enough extra burden the users haven't revolted and mostly accepted their lot of having to use 2FA. The few security minded folks are quite excited but don't expect miracles. Users hate anything that adds extra steps to their day and would rather have the business ransomwared than have any inconvenience.
Significantly more secure than the phone based authenticators with a bit more overhead to implement successfully. The cost difference between something like Duo and Yubikeys is quite significant if you're operating without a FAANG type budget. We're fans of the touch "button" on the key making it near impervious to hacking even if left in the USB slot.
Do you think Yubico YubiKeys delivers good value for the price?
Yes
Are you happy with Yubico YubiKeys's feature set?
Yes
Did Yubico YubiKeys live up to sales and marketing promises?
Yes
Did implementation of Yubico YubiKeys go as expected?
Yes
Would you buy Yubico YubiKeys again?
Yes