Yubico Yubikeys Get the Job Done

Yubikeys are integrated with Userlock to provide 2FA for high risk users on a local active directory account. Also leveraged for a few 2FA functions on various websites. Stores multiple keys on one device making it a one stop shop for all our 2FA needs. Impressively durable during testing as users are quite hard on their devices here. Sent them through the wash, ran them over with a car etc. during testing and have only had one broken and we're still trying to figure out how the user did it. The story just doesn't line up for how tough these devices are.

Yubikeys significantly reduce the amount of exposure to account takeover. This also satisfies regulatory requirements for 2FA on specific high risk accounts. As an added bonus, most large companies support integration of Yubikeys into their online applications further increasing security and reducing attack surface. New Yubikeys also support NFC 2FA making for additional security for phones where plugging in a key isn't really an option.

Users don't love having additional items to manage and 2FA is considered a chore. Compared to other 2FA solutions, it's low enough extra burden the users haven't revolted and mostly accepted their lot of having to use 2FA. The few security minded folks are quite excited but don't expect miracles. Users hate anything that adds extra steps to their day and would rather have the business ransomwared than have any inconvenience.