MFA on Your Keyring

I have used multiple generations of Yubico YubiKeys and watched them improve over time. I like to keep them as a backup method for any account that can't be easily reset. If you lose your primary MFA device you can have a YubiKey locked in a safe that gives you a physical key back into the digital world. We also use them for employees who don't have or won't use a personal device as an MFA token. This is a better solution than buying company-owned smartphones.

Cloud accounts are no longer the #1 attack vector. It is highly unlikely that an account protected with MFA could be remotely compromised. This lets us focus on other areas that consistently need improvement, like the human element. MFA helps cloud adoption and enables confidence in cloud security systems. I know if the cloud service supports Yubico YubiKeys they are security conscious.

They are loved by people who don't want to use a smart device for MFA. That's about it. Most people would rather use their smart devices. So that's a limited use case. Having a backup MFA device to get you in quickly after losing your smart device is priceless. Bravo.