Security keys are your physical key to your online accounts. Google and Cloudflare are two companies who stopped phishing attacks on their employee base by using security keys.
Security keys are the best form of 2-factor authentication and in some cases can be used instead of a password.
Yubikeys are the best security keys and we use them at IT Solver. We encourage our customers to use security keys and a password manager (1Password or Lastpass) as we everyone to have good security.
While banks have yet to adopt security keys, the big tech companies are the leading the way. Works with Google, Microsoft, 1Password, Lastpass, Stripe, Shopify, Facebook, Twitter. Complete list of supported websites.
We suggest having two keys per person, one as a backup so you don't get locked out.
If you want assistance with getting setup with Yubikeys and 1Password (password manager), we offer the Security Boost service.
Previously, YubiKey offered the YubiKey 5 series in your choice of USB-A; USB-A and NFC; USB-C; and USB-C and Lightning. But with the new YubiKey 5C NFC you no longer have to pick between being able to plug your key into a USB-C port or the convenience of NFC authentication, which lets you just tap your key on your device — you can now buy a key that offers both.
HARDWARE-BASED KEYS OFFER EXTRA LAYER OF ACCOUNT SECURITY
Hardware-based keys offer an extra layer of account security by requiring that you either plug in the key or tap it to your device when you’re trying to log in. That makes them a good alternative to text message-based two-factor authentication, which can be intercepted by hackers more easily than things like security keys or codes from an authenticator app like Authy.
The YubiKey 5C NFC supports iOS, Android, Windows, macOS and Linux. And if you do invest in a security key, ask us how to make the most of it.
- Fast and secure tap-and-go authentication
- Secures all major browsers and operating systems
- Multi-protocol support for FIDO2/WebAuthn, FIDO (U2F), Smart Card, OTP
- A single key secures hundreds of services
|Authentication Methods||Passwordless, Strong Two Factor, Strong Multi-Factor|
|Identity & Access Management||AWS Identity and Access Management (IAM), Centrify, Duo Security, Google Cloud Identity, Idaptive, Microsoft Active Directory, Microsoft Azure AD, Okta, Ping Identity|
|Productivity & Communication||Google Account, Microsoft account, Salesforce.com|
|Password Managers||1Password, Dashlane Premium, Keeper®, LastPass Premium|
|Function||WebAuthn, FIDO2 CTAP1, FIDO2 CTAP2, Universal 2nd Factor (U2F), Smart card (PIV-compatible), Yubico OTP, OATH – HOTP (Event), OATH – TOTP (Time), Open PGP, Secure Static Password|
|Certifications||FIDO 2 Certified, FIDO Universal 2nd Factor (U2F) Certified|
|Cryptographic Specifications||RSA 2048, RSA 4096 (PGP), ECC p256, ECC p384|
|Design & Durability||Water Resistant, Crush Resistant, No Batteries Required, No Moving Parts|
|Device Type||FIDO HID Device, CCID Smart Card, HID Keyboard|
|Manufacturing||Made in USA and Sweden|