Just in:
French Leaders Gather for Interfaith Iftar Dinner // Melco Style Presents “SANRIO CHARACTERS STUDIO CITY CARNIVAL” – Explore a SANRIO World of Unlimited Love and Cuteness // Universal Language for Healthcare: General Authority Embraces Global Coding System // Andertoons by Mark Anderson for Thu, 28 Mar 2024 // TUMI Hosts Global Launch Event in Singapore to Unveil Women’s Asra Collection and Announce Global Ambassador, Mun Ka Young // Following the Money Trail: US and UK Investigate $20 Billion in USDT Transfers Tied to Sanctioned Russian Exchange // Andertoons by Mark Anderson for Fri, 29 Mar 2024 // Saudi Arabia Unveils Green Financing Tool to Achieve Net-Zero Goals // German Job Market Resilience Bodes Well for Economic Recovery // Emirati Aid Reaches Ukraine as Food Shortages Bite // New Nylon Constant Torque Hinge From Southco Provides Position Control In A Compact Package // US reiterates concern over Kejriwal arrest, Cong accounts // CABSAT 2024 Ushers in 30 Years of Media Innovation // Digital Hub Unveiled: Xposure Launches Platform for Global Photography Community // Ingdan Announces 2023 Annual Results // Ajman Celebrates Conclusion of Ramadan Activities with Grand Ceremony // U.S. Compliance Takes Center Stage at OKX Following Industry Jitters // Experience Ultimate Shopping Freedom at 4.4 Shopee Spree: Don’t Worry, Shop Shopee! // Hong Kong Crypto Exchange Application Stalled by US Lawsuit // Sharjah Chamber Breaks Ground on Final Expansion with New HQ Pact //
HomeBiz TechUsing a YubiKey to protect your Google account, Facebook, GitHub, Dropbox, Salesforce and more

Using a YubiKey to protect your Google account, Facebook, GitHub, Dropbox, Salesforce and more

img6402

If you’re looking for a quick, easy, and affordable way to protect your Google account, Facebook, GitHub, Dropbox, Salesforce admin account (and much more), or looking for a way to harden your Mac or Windows login credentials, then you need to take a look at YubiKey.

Must read: Best Raspberry Pi alternatives, starting at only $5

ADVERTISEMENT

OK, first off, what is YubiKey?

YubiKey is a small authentication key manufactured by Yubico that can be used to securing access to a wide range of applications, including remote access and VPN, password managers, computer login, FIDO U2F login (Gmail, GitHub, Dropbox, etc.) content management systems, popular online services, and much more.

The wide range of support makes YubiKey a great choice for personal use, business, enterprise, or even developers.

Physically the YubiKey looks like a small USB flash drive, although there is one that also incorporates NFC for use with Android devices. The keys range in price from $18 for the basic FIDO U2F key (which will work with online services that support FIDO U2F, which include Facebook and Google), to $50 for keys that in addition to FIDO U2F also feature strong crypto and touch-to-sign, plus one-time-password, and smart card.

A chart detailing the available keys along with their specific functionality can be found here.

Now, rather than outlining how you protect your accounts with YubiKey (the instructions on the Yubico website are detailed and will guide you through the myriad different services you can secure with your YubiKey more efficiently than I can) I’m going to look at the pros and cons of that I’ve come across over the past few weeks.

Pros:

  • Cheap (starting at $18)
  • Easy to use (if you can figure out two-factor authentication, you can understand YubiKeys)
  • Keys are incredibly robust and totally waterproof (one of mine lives on my keyring and gets bashed about a lot, the other I wear around my neck on a chain most of the time)
  • Pretty indistinguishable from USB flash drives so the keys don’t attract attention
  • Scalable (customization tools and custom programming options available for business)
  • Support for Open PGP encryption and code signing
  • Offers a really easy way to secure a Windows or Mac machine

Cons:

  • Ideally, you need two keys in case one gets lost, stolen, or damaged in some way.
  • Not all browsers support U2F so you must be running Google Chrome version 38 or later, or Opera version 40 or later (this is not a YubiKey limitation but a FIDO U2F limitation)
  • No iOS support, which means having to fall back on other two-factor authentication methods
  • Big gaps in services that use FIDO U2F (no support for Yahoo!, Microsoft online services, PayPal, banks, etc.)
  • Some of the documentation can be a little intimidating

See also:

This USB thumb drive is one serious and secure business tool:

(via PCMag)

ADVERTISEMENT

ADVERTISEMENT
Just in:
French Leaders Gather for Interfaith Iftar Dinner // Sharjah Chamber Breaks Ground on Final Expansion with New HQ Pact // Infineon and HD Korea Shipbuilding & Offshore Engineering jointly develop ship electrification technology // Global Audience to Witness Thrill of Dubai World Cup // New Nylon Constant Torque Hinge From Southco Provides Position Control In A Compact Package // Saudi Arabia Unveils Green Financing Tool to Achieve Net-Zero Goals // First-Ever Fortune Innovation Forum Draws Top Global Leaders to Hong Kong, Promoting Agendas On Collective Cross-Sector Advancement // Following the Money Trail: US and UK Investigate $20 Billion in USDT Transfers Tied to Sanctioned Russian Exchange // 2024 Lok Sabha Elections Will Be The Costliest One Till Now In The Whole World // US reiterates concern over Kejriwal arrest, Cong accounts // No running of govt from jail, says Delhi Lt Governor // Emirati Aid Reaches Ukraine as Food Shortages Bite // Hope for Respite as UAE Endorses UN Plea for Gaza Truce // AIA Hong Kong Wins More Than 20 Accolades at MPF Ratings MPF Awards, BENCHMARK MPF of The Year Awards and Bloomberg Businessweek Top Fund Awards // Melco Style Presents “SANRIO CHARACTERS STUDIO CITY CARNIVAL” – Explore a SANRIO World of Unlimited Love and Cuteness // German Job Market Resilience Bodes Well for Economic Recovery // Universal Language for Healthcare: General Authority Embraces Global Coding System // Hong Kong Crypto Exchange Application Stalled by US Lawsuit // Andertoons by Mark Anderson for Thu, 28 Mar 2024 // CABSAT 2024 Ushers in 30 Years of Media Innovation //