Yubico YubiKeys

Providing a second factor authentication.

Yubikey has two slots so it can be configured for two environments.

Long touch reduces accidental activation.

It would be nice to have a cover to prevent accident activation.

Provides very effective MFA for our accounts.

Prevents phishing attacks.

Prevents brute force attacks.

Provide more integrations for services - particularly financial services (banks, credit cards, etc).

The setup is very easy. It's well documented and it's well supported with most services.

The backup situation is a hard problem to solve, but it needs to be resolved sooner or later because as it is now, if you have two Yubikeys, you have to enroll them both. When you lose one, you have to remember which one to deactivate and that's a hassle. Fortunately that doesn't happen very often. But having a backup Yubikey that you don't have to enroll everywhere but they can switch over to would be a dream.

Security

Looks good

Attaches to key ring

More colours

More integrations

Find my yubikey via bluetooth

It streamlines the login process where in past with multifactor authentication, each phase took up to 30 seconds. Adding quite a bit of time to the user experience, we're able to reduce that to less than a second.

So interestingly, with the nano devices that tend to stay in the computers, users are always accidentally hitting it and it will just pop up a random text string in whatever they're working on. So a way to add an easier way to add a delay into the device. Recognizing a touch.

So as I said, the second-factor authentication that it does is really well. The response time is really good and all you have to do is just enter the second factor code and that's about it. Right? So that's the good part about using Yubico YubiKeys.

Occasionally, once or twice it might happen that I would press the key, but it'll not detect that I pressed the key. So I'd have to press it again, but that's just occasionally, sometimes. So maybe even if the key was a little bit bigger and I've detected that, I would've pressed it. But apart from that, I think it's pretty good.

It works all the time and it works well, so I think that's all I care about and it that's the work that it's supposed to do really well.

It can be about access control because either right now it's just you have access or you don't have access. I think there can be a use case where you are allowed a particular set of servers and not a particular set of servers. I think maybe it's there or we don't use it, but I haven't seen that. I think I've used Yubico YubiKeys at two companies and I haven't seen that. Maybe that's something that can be added.

Remote access. I'm able to sign documents with the certificates that we have placed on our Yubico YubiKeys, so it's nice to be able to sign a document from anywhere, from any computer with my YubiKey instead of having to look for an adapter for my common access card.

Maybe just offer a little key ring attachment so it's a little bit easier. Or at least having a set product partnership or something instead of trying to find those Amazon one-offs that all fit, slip it into the loop and then be able to carry with you.

Right now I don't know, but I like very much this product because for me it's a lot of security on my systems and my personal stuff.

I saw in these, I don't know the name of the industry, but it is like ybi, but you can open your doors with that. It's great because for example, in my house, I have a door and I can unlock it with my cell phone. But if I can open with Yubico YubiKeys, I think it's a great opportunity.

I think the best thing is it has a lot of capacity and it's very, very secure. It can store a lot of private keys versus all the other products. We have reviewed a few other products, but Yubico YubiKeys gives a lot more capabilities than some of the other security key brands.

I think the only thing that I feel is the capability to store more keys on it, and it's a bit expensive compared to the other security manufacturers. So if we really have to sell it to our customers, they're not very comfortable paying for the high price, but then you're paying for more features.

It's fast speed. You don't have any help. Pull out a phone and load a code or pull out a phone and do, yes, this is me. It's like plug it in, pop and acknowledge the MFA request.

I think the supply chain of getting them is probably the biggest challenge. So getting them out to use in a decentralized workforce. So having to go through Amazon or some other reseller and load addresses and try and get them out to employees as a part of our onboarding process.

Yeah, just peace of mind, some security, and not worried about whether or not the public key and private key is going to work. MFA is kind of weak, so it gives us a level of confidence.

I can't think of anything.

Primarily it's very convenient to use. Then also it assures when we open the machine, the authentication is on when we open the machines, which I refer to laptop, that's a very primary use case for us and that has been consistent along.

It requires a little bit of setup. I think that's where we had a little additional resources spent on it to integrate our current ortho dot with the YubiKey. When we bring in and the newer models, when we bring in, there's a little more maintenance that we need to do on and off every time. So that's something I request to look into to make it more easier.

It's very easy to use.

Sometimes it's too big. I noticed a small version of it, but the standard version is (too big).

It's authentication

Not everybody accepts it. That's the only cons. It's not everywhere. It's not everywhere yet.

It just makes your life a little bit easier when you need to do your two-factor authentication and that it's already ready for you. No other devices are necessary, no clicking around, you just click your YubiKey and you're done.

So my YubiKey is the very small one and it's very hard to remove from your computer. So I think it's a bad practice, but I leave it in my computer because of that.

You can just tap it in the back of your phone and it works.

I don't think it's an improvement, but you cannot back it up and that's part of the way it works. But don't lose it. Just don't lose it.

It's very, very cost effective and is quite reliable.

I can't think of any. They're nice and small too. I kind of like that. I don't take up space on the laptop really.

It's very easy to use. So I use the USBC and NFC one, so not only can I either insert it into a USB-C port, which the new iPhone 15 or iPad has, but you can also just tap it using NFC. So it's really easy across the broad range of devices to authenticate.

The only con is hardware based, so if it's in the other room you might have to get off the sofa to go get it. But aside from that, I mean I think that trade off is worth the security provides.

I would say very simple to use. It's something that everyone can figure out. Just plug it in, press the little button, and you're good to go.

I would say the fact that it is easy to manage an account so you can label each key so you can have one for each employee. If that employee notifies you that they lost it or they're no longer with the company, you just go and remove it.

I think one thing I like as well is that somebody has to be at the device to initiate the key. So even if you leave it plugged into your device, you walk away somehow a hacker gets remote access, they're moving the mouse around, they try to go to an account. Even if your Yubico YubiKeys is plugged in, unless you're there to press it and physically give it input, it's still not going to send the credentials. So that's a big sell for me.

As easy as the management is, it still can feel a little bit overwhelming as you add more and more keys and more team members. And there's also a bit of reliance on trusting that team member to tell you, "Hey, I lost the key." Because what happens if they lose it? They don't tell you someone gets a hold of it, then all of a sudden they have the physical key into the account where if you're using something that's a password solution, like syncing 2FA codes with a password manager, you need the knowledge of what the master password to get into the vault. So unless that employee tells someone which they could choose to do, but assuming they don't, it's a little bit more difficult in my mind to gain access that way instead of just stealing someone's key if they get pickpocketed or just so many ways that potentially that key could get in the wrong person's hands.

It identifies who I am by being able to scan my fingerprint. It verifies that I am the user because it's physically on me. So it does a great job of authentication and it's very convenient in its form factor. It's very small, it can fit on my key chain.

Sometimes the product's just not on me, so I have to run downstairs or run to my car to get it. And then in that case, maybe using an on-device authentication, then I switch to that.

Touch to authenticate

Every day carry

The form factor is too small to remove from a port comfortably

Usage is simple, once trained

Durable

Small, portable size

More-or-less reliable

Integration with VPN could be better-- login requires user, password for step one, then password + Yubikey for step two. Why make me enter the password twice?

Easy to authenticate

Size

Fast easy authentication to hardware and software

Easy for users to use

Easy to keep up with

We have had a couple of instances of issues with the key not working correctly intermittently

Some issues with users breaking keys as some models are slightly flimsy

Overall we are happy so I can’t think of anything else