Yubico YubiKeys

We use GSuite. Yubico YubiKeys integration is a breeze.

I'd say it's very appropriate to secure your cloud access and also for login, it's less appropriate for local login. I'd say logging into Windows computers can be hard to do correctly. And on Mac computers, it's a no go as far as I can tell.

Access to secure assets like GitHub and AWS it's particular good in these scenarios, and I'd recommend it to anyone using these tools, particularly with elevated access. To be honest it's also fine for the average user too, in a security conscious company. It's less good for mobile access to products.

It's great for streamlining operations. When you have users that tend to struggle with technology, the concept behind the product is incredibly simple. It's plugged in, you touch it, and you're finished.

I think, as I said, it's perfectly suited for second-factor authentication where all you have to do is a security team registers the key and you put it in your laptop and then you use it as a second factor. I think that's the best use case governing all access to making it a mandatory second factor so not relying on your cell phone or authenticator app, you just have this hardware thing which is much more secure and you can carry it with you as well when you are traveling.

It's well suited. I think the only issue is you need to have the key and if you lose it, then maybe there is a potential issue. I think those are the only concerns I have.

When I used it as an engineer for a software company a few years ago, I would be able to continue doing work on the train ride into and out of the office. So that was an extra hour, two hours a day that I was able to access our systems and still be able to continue to work. So that was a lot of fun. Well, I don't know if stay fun, but it was nice to be able to have the access, not have to be connected directly to the corporate network.

I think it should work. I think it's best when you try to open a computer and you try to access an email and for example, Salesforce and the other systems. And the last, I don't know because I am a heavy user of this.

We've been using this for one of our products where the requirement is AL3 where you can only use the web certified security gear and it offers the highest level of security and authentication. So I think the key that Yubico YubiKeys is providing is the best for that use case. For less appropriate, I think right now, I mean with pass keys, the sync pass keys becoming a thing. I don't know how for a consumer market you become a person would not want to keep a security key. It depends on the level of security that you're looking for. So for a consumer market for probably my social medias, I won't use a security key. I probably sync it to the cloud.

Anything handling a sensitive information, so like banking, financial information, healthcare information, and also even personal information that you don't want necessarily shut out in the fallen into right hands. You want to have control over that data is the best way to protect it.

I haven't found one where it's less appropriate except that my wife doesn't want to use it. It's too technical for her, so I guess she'd be better off saying why she doesn't want to use it. Nothing. She's even that way with password managers, so I can't think of anything, quite frankly.

Server authentications is where we don't see much of a use case. So far my primary role and also the use cases I have seen so far is using the laptop and authenticating the apps in the laptop. So those are the two major use cases I have seen. But this can be expanded to servers as well because I'm not in the infrastructure area, so I do not know whether you have it or not. But that's one thing I feel like you can look into expanding

It's appropriate when it serves as the extra two factor authenticator when I lose my phone. Less suitable, I don't know.

Just a replacement of MFA

I think it's good for anyone who uses a computer to work. I guess anytime you need two-factor authentication in an environment where you have somewhere to plug in, it's useful. I guess it's hard for iPhones now because you need an extension or a different device, but soon, I mean with the iPhone 15 it'll be solved. I'm not sure.

When you need to store password on your phone, that's the easiest way to do it with the NFC and that's it.

I like to use it as another factor in authentication. I think it's really great that way. It's supported by industry standards, open standards.

Anything where you value the security of access to data? Financial data, whether it's personal or professional, is highly useful because it provides us with that extra layer of physical security protection. If the data is something you're signing up for where you don't really care, it doesn't really matter at that point if it's a throwaway account on an internet site. But anything where security is important, definitely.

I think whenever you're either a small team that works together in person or you're a company that has the resources to give each employee a Yubico YubiKeys, that's a great use case. I've found it's maybe not as great if you're working with freelancers that are remote because you don't know necessarily the lifespan of the freelancer. You may work with them for three months and then maybe you start working with a different freelancer. So to mail out Yubico YubiKeys for that very part-time freelance position is not necessarily the easiest. So in those cases, I've resorted to just syncing the two-factor codes and giving them a log into a password manager because that's much easier to onboard. So yeah, I guess that would be maybe one of the downsides is onboarding users, getting them started. But if you have a small team in person or you've got the resources, and you've got an IT department, then onboarding is not as much of an issue.

I think this product is well suited for any enterprise that wants to roll out pass keys because it's fully compliant with that. And any company that's worried about password risk, this is a good replacement for that.

YubiKeys are ideal as a second factor in 2FA.

Seems suited for workplace MFA. Would be nice to integrate with other identity verification schemes.

When traveling and trying to access your work laptop

For us high value targets that have sensitive access, it just makes sense to use Yubico YubiKeys. We feel comfortable with the solution and hardware. It’s super easy for everyone to use. They say the feel important having to use it like a spy sometimes. For our everyday user we have not deployed currently and are still trying to decide if it’s right for them due to the fact that we have many pieces of hardware lost with just their access entry NFC devices.

laptops and mobile