osemanagement.blogg.se

The list on Yubico's website include sites that use the Yubico authenticator app. Firstly, not that many sites allow the use of security keys. Herein lies the problem with security keys.

If you're here and reading this, you probably already know that this is a security flaw or vulnerability. However, some either only allow 2FA via an SMS or the SMS is the ONLY backup option. Most sites offer the ability to use an Authenticator app like Authy or Duo. However upon purchasing two keys, I soon discovered that not that many sites allow the use of a security key. To access an account you activate 2FA, enroll your security key and any future logins require your username, password and security key (or backup key). The idea behind a security key is a solid idea. Personally, I went with the USB C type because it seems that USB C is now becoming the standard over USB A, so I wanted to future proof it, but I also had to buy a USB A to C adaptor - no big deal! USB A to C) and the YubiKey will still work fine. If you're not sure which one to get, just remember you can also spend a few extra quid on a USB convertor (e.g. I would definitely recommend getting this product though (and another one for backup purposes) as I am sure it will become the standard over time. One major let down for me personally is that the YubiKey authentication app does not work on macOS High Sierra (I will buy a new Mac soon with the latest OS, but I can't upgrade this one because I have critical apps on it that will stop working!). No need to dig out your phone and find the authentication code, or wait for several minutes for the text message to arrive. Not only is a physical key more secure, it is also faster (for websites that implement it correctly) - you just simply tap on it and you're done. As it's a more secure method than SMS or authenticator apps, it really should become the standard for all websites - most importantly, banks! So the lack of third party adoption really lets this product down, unfortunately. This is a great product that will keep your online accounts as secure as possible, but the big issue is that this method of 2FA is only supported by a handful of websites.