Yubico YubiKeys Review
May 16, 2024
Yubico YubiKeys Review
Score 10 out of 10
Vetted Review
Verified User
Overall Satisfaction with Yubico YubiKeys
The primary problem it solves is the non-repudiation. So knowing that the person logging in is the person who has the key and it's our employee. So the use case is things like there's none other MFAs that you rely on cell phones or QR codes that can be shared. A physical key cannot be shared.
- It's fast speed. You don't have any help. Pull out a phone and load a code or pull out a phone and do, yes, this is me. It's like plug it in, pop and acknowledge the MFA request.
- I think the supply chain of getting them is probably the biggest challenge. So getting them out to use in a decentralized workforce. So having to go through Amazon or some other reseller and load addresses and try and get them out to employees as a part of our onboarding process.
- So risk reduction in terms of accessing very sensitive systems. For example, having root level access to AWS, that's only, we have a multi key set up on the root account and then those shared with say shared issued to a handful of constituents and geographically dispersed so that no one person is held all the keys so to say. So definitely a risk reduction in terms of accessing standard information in enterprise.
- Speed for the end user is probably most of the largest benefits. I mentioned the shortfalls is just like when someone uses one you have to go through that's like not like, good scanning code, now you have to pull back to some other solution.
- The onboarding flow of getting them out to use this depending on not necessarily Yubico's function, I know they do do some distribution, but being able to more tightly weave that into an HRS or IT system.
I'd say primarily around account takeover. It's non reputable.
So far so good. I haven't had any complaints other than I do this things one time and then it's pretty easy. And then to default back to the speed it is for folks to log in. So we require people to log in daily and so it makes that point of MFA at the beginning of the day and then anytime they're accessing the send the system we pump from MFA and it's an easier way to get in than having to multifactor with another device.
Do you think Yubico YubiKeys delivers good value for the price?
Yes
Are you happy with Yubico YubiKeys's feature set?
Yes
Did Yubico YubiKeys live up to sales and marketing promises?
Yes
Did implementation of Yubico YubiKeys go as expected?
Yes
Would you buy Yubico YubiKeys again?
Yes