Love Yubico YubiKeys!

We use Yubico YubiKeys company-wide to secure all employee accounts. This is used for accounts on all 3rd party platforms that support it.

We implemented Yubico YubiKeys after having problems with constant phishing attempts being sent to our employees. We feel that the phishing-resistant protections provided by the Yubico YubiKeys, greatly increases our security posture.

Obviously it greatly decreases the chance of compromise. Securing an account with a security key never guarantees protection, but greatly decreases the chance of an account breach. My providing protection against MITM attacks and phishing resistance, we believe that we have an increased security level and are better protected against most forms of common breach.

It is always seen as a pain and "just something else we have to do". However once users get used to them, they are generally well received once staff is able to see how it makes their life easier. Since the Yubico YubiKeys can be safely left plugged into a device, touching it to validate the MFA is much easier then pulling out a phone, going to an Authenticator App, and typing in a code.