Setup a 2FA Key for MAXIMUM Online Security! (Yubikey Tutorial)

Ғылым және технология

Using the Yubikey 5 series, learn exactly how to setup and use your 2FA key not just as a key, but also as an authenticator. Get your own Yubikey using my affiliate link: geni.us/yubico-store
*This is not a sponsored video, but the links to Yubikey are affiliate links, which means that I will receive a commission if you use the links to purchase your own keys. Thank you for your support!
If you care about your personal security and privacy online, download my free security checklist here:
✅ Security Checklist: www.allthingssecured.com/secu...
🔹🔹🔹What You Should Watch Next🔹🔹🔹
We've got a lot of great privacy- and security-related content here on the All Things Secured KZread channel (although we admit we're a bit biased). If you're wanting to increase your online cybersecurity, here's what's next:
✅ Change these 7 Facebook Privacy Settings NOW! • How to Change Your Fac...
✅ STOP Using VPNs! (here's why): • Don't Use a VPN...it's...
✅ Are spy apps safe? • DON'T USE MOBILE SPY A...
🔹🔹🔹Help Support All Things Secured (Recommended Services)🔹🔹🔹
If you enjoy this kind of practical security and privacy content, one of the best ways you can help support this channel is by using these affiliate links to our favorite products and services. When purchasing through these links, you not only get the best available deal, the companies will also pay us a small commission. Thank you for your support!
✅ Recommended Password Manager: www.allthingssecured.com/yt/1...
✅ Recommended Identity Monitoring: www.allthingssecured.com/try/...
✅ Recommended 2FA Security Key: www.allthingssecured.com/yt/y...
✅ Recommended Secure Email: www.allthingssecured.com/try/...
✅ Recommended VPN: www.allthingssecured.com/try/...
*********************
Video Timestamps
*********************
0:00 - Use 2FA Keys to Secure Your Accounts
1:06 - Buying the Yubikey 2FA Keys
2:43 - How to Setup a Yubikey 2FA Key (Gmail)
5:30 - Yubikey Authenticator vs Google Authenticator
7:27 - How to Setup Yubikey 2FA Authenticator on Facebook
9:15 - Lock Your Computer with Your 2FA Key
10:17 - Congratulations! You're Now Set Up
*********************
Setting up a Yubikey 2FA security key isn't a difficult process and thankfully it only takes 5-10 minutes. In this video, Josh walks through the entire process for both Google and Facebook so that you can see what is required to get these only accounts secured.
Purchase your own Yubikey here (affiliate link): geni.us/yubico-store
#yubikey #2fa #cybersecurity

Пікірлер: 489

  • @AllThingsSecured
    @AllThingsSecured2 жыл бұрын

    Do you use a 2FA key for your logins? Let me know in the comments below! Grab your own Yubikeys here: geni.us/yubico-store

  • @greatgg9472

    @greatgg9472

    2 жыл бұрын

    when i put the code , it's said invalid. :(

  • @coffeecryptoconstruction2582

    @coffeecryptoconstruction2582

    2 жыл бұрын

    Trying to setup a backup key on coinbase. I got the 1st one hooked up but the backup doesn't seem to want to Hook up.

  • @ranzali5564

    @ranzali5564

    2 жыл бұрын

    If YubiKey is the default 2FA method... is it advisable to have other methods like "Google prompts" also enabled (Or does that negate/undermine the purpose of the Yubikey)?

  • @JohnBoonBeanDutchman

    @JohnBoonBeanDutchman

    2 жыл бұрын

    The price of that key is just ridiculously high, if you take 2 you will lose €150,- euro €15,- would be a reasonable price. then they say that it will last 30 years, but the usb input that also changes every once in a while and they can probably make those things for a €1, if we wait a few more years, I think there will be several brands or systems on the market, think that now only people who are willing to pay the price for it who have cripto or other valuable things online and if the rest don't come to purchase they will automatically become cheaper, for this price I just feel for me as a ripped off, I already had seen one other brand just for €13,20 but was sold out now for the moment, I think I it say it was a 2FA key

  • @cooldog60

    @cooldog60

    2 жыл бұрын

    Code is not working.

  • @angelh1743
    @angelh1743 Жыл бұрын

    Finally!!! Someone who know how to explain the actual Yubico app. I went through 17 videos before I found yours. Thank you so much for clearly explaining how this all works.

  • @dcovatech
    @dcovatech4 ай бұрын

    Excellent presentation. At first I was confused about the backup key. In the IT industry a backup implies a copy, a duplicate of such as a file or the contents of a hard drive. But I eventually learned that in the case of a security key, a backup is not a copy, a duplicate, of the first key. A backup is a second key independent of the first key. It took me a bit to unravel how the backup term was used so differently in the context of security keys.

  • @marybaker8582
    @marybaker8582 Жыл бұрын

    I have been looking for a way to use my key for a while. You're the first person who has been able to explain how to utilize it correctly, and most importantly, easily.

  • @AllThingsSecured

    @AllThingsSecured

    Жыл бұрын

    Great! 🙏

  • @zen-ventzi-marinov
    @zen-ventzi-marinov2 жыл бұрын

    Same with my wife. I store my second wife in a secure storage that I'm not going to tell you about.

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    😂😝

  • @TheDaizM

    @TheDaizM

    Жыл бұрын

    Not so secret. We all store them at work, lol

  • @namo1746

    @namo1746

    Жыл бұрын

    Because its Halal as a muslem, I have stored 2 wives in the same house and start my journey to find the third then the fourth one.

  • @GerryVeerman

    @GerryVeerman

    Жыл бұрын

    Unsubscribing. This has ‘Yubico promotion channel’ all over it. Hilarious. Next video’s maybe have a second corpse play the dumbo with moron questions and comments. Shopping channel vibe. 😂

  • @Guda6

    @Guda6

    Жыл бұрын

    Great comment

  • @ephemeralsamsara
    @ephemeralsamsara2 жыл бұрын

    This is a great and informative post. Thank you for posting this, I don't have a physical key, however you really have sold the benefits and I believe I'll definitely be getting one.

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    Great to hear! Like I said, there are free ways to do 2FA, so I would only use the key if it fits in your budget. But I love using the key over the authenticator app.

  • @ephemeralsamsara

    @ephemeralsamsara

    2 жыл бұрын

    @@AllThingsSecured The apps are what I currently use and they have their place, however you really demystified 2FA in terms of physical devices and that's definitely the way I'd like to go. Thank you very much

  • @anotherwatch
    @anotherwatch Жыл бұрын

    Just the video I needed. Saved me a lot of time. Thanks for all the explanations.

  • @AllThingsSecured

    @AllThingsSecured

    Жыл бұрын

    Glad it helped!

  • @harpersneil
    @harpersneil2 жыл бұрын

    Really great video, thank you. Absolutely going to pick a Yubikey and naturally I'll be using your affiliate code to do so.

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    Thanks for the support! And I hope you enjoy using the new key!

  • @ashleymelo272
    @ashleymelo2722 жыл бұрын

    They just released the Yubikey Bio, Now it has a fingerprint reader and makes sure it’s actually you.

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    I just ordered mine and I’ll be reviewing it soon!

  • @GabrielHenrique-jl2ex

    @GabrielHenrique-jl2ex

    2 жыл бұрын

    @@AllThingsSecured I'll wait for this video :)

  • @jerrysanders9101

    @jerrysanders9101

    2 жыл бұрын

    They been sold out for weeks ughhh

  • @jerrysanders9101

    @jerrysanders9101

    2 жыл бұрын

    Hey when you connect two keys, if you lose one, the backup key will access your website just the same as the original key you lost? Thanks Ashley!

  • @CapitanFantasma1776
    @CapitanFantasma177610 ай бұрын

    This is all so new to me. Thanks!

  • @3D_CryptoCamo
    @3D_CryptoCamo10 ай бұрын

    I really enjoy your video! Thank you!

  • @drakezen
    @drakezen2 жыл бұрын

    Great idea! Thanks for the reminder to do something like this

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    My pleasure!

  • @fannet4629
    @fannet46292 жыл бұрын

    Love this! Fantastic advice and ive gone ahead to buy one. You should so do an Every day carry video that would be awesome.

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    Thanks for the suggestion! It's on my list.

  • @MR-nz8bv
    @MR-nz8bv2 жыл бұрын

    I watched 4 videos on the Yubikey and still didn't understand how it should be used until I watched this video. Thank you!

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    Glad to hear it!

  • @ryaniglesias6381
    @ryaniglesias63812 жыл бұрын

    Josh, as usual excellent video

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    Thanks, Ryan!

  • @aribriddell
    @aribriddell9 ай бұрын

    Thanks for the Tutorial!!

  • @efuller6770
    @efuller67702 жыл бұрын

    Wife just got sent some of these from her work and I hadn't seen them before. Suspected they were something like this but thank you for the informative video

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    My pleasure 👍🏻

  • @karlkiyotaka
    @karlkiyotaka9 ай бұрын

    Thanks man, Imma buy it soon!

  • @AlejandroBelloRD
    @AlejandroBelloRD Жыл бұрын

    First I've watched each of your "ditch Google Authenticator" and yubikey series at least once. I just wonderedd if you happend to know / recommed a NFC reader addon for Windows laptops. Plugin and removing that USB connector over and over could really wear down the gizmo in a rather short time. Thank you and keep up adding more excellent videos.

  • @monkey2bize
    @monkey2bize2 жыл бұрын

    great video! informative and to the point

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    Glad you liked it!

  • @coweatsman
    @coweatsman3 ай бұрын

    I am yet to start using these keys. I am waiting for 2 keys from Yubico, a Yubi 5 NFC and a 5C NFC. From watching a few videos while waiting delivery it looks like it will be a steep learning curve.

  • @AFiB1999
    @AFiB19992 жыл бұрын

    It is really cool and secure but... only bad side is: Holds only 32 TOTP entries. So if you have more that 32 you better off using Authy or Bitwarden premium TOTP to store non important TOTPs and keep the important ones on your ubikey. I learned the hard way :/

  • @kingpanda6585

    @kingpanda6585

    Жыл бұрын

    I was actually planning on buying a ubikey to secure my bitwarden master email. Is it possible?

  • @AFiB1999

    @AFiB1999

    Жыл бұрын

    @@kingpanda6585 you can secure your bitwarden with yubikey

  • @kingpanda6585

    @kingpanda6585

    Жыл бұрын

    @@AFiB1999 awesome. I'll look into that. Thanks!

  • @robertabendroth7110
    @robertabendroth71103 ай бұрын

    Thank you for your work on our security. As a man who teaches security, I am not finding a video on what I consider to be a core threat to a person's security, "MySpy" and other embedded spay software that may or is installed on peoples phones and computers. It is well understood and highly used by those "actors" who use them, the public is oblivious. To me, if you are talking security, this a a MUST presentation: 1) to create the awareness of what Spy software is. 2) How spy software works, is installed and can track you, intimately. 3) A. How to combat it? B. How to not allow it to be installed on your tech (iPhone / Laptop) C. How to detect it (very hard to do) D. How to get rid of it (regardless if you know you have it.) To me, this is a fundamental to any website / KZread channel focussing on security. Maybe you already have a video on this topic, is so, I did not find it and I apologize. If you do not have this video, this is a MUST video and to me, number ONE for anybody taking iPhone / Laptop and Internet security. A MUST!!!

  • @10GTech
    @10GTech2 жыл бұрын

    Thanks for this video!

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    I’m glad it was helpful!

  • @Jaymac0929
    @Jaymac09292 жыл бұрын

    Im going to try this thanks for the Review. 😎💯💯💯

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    Good to hear! Let me know how it turns out.

  • @Pfsensepluss
    @Pfsensepluss6 ай бұрын

    Hello thank you so much for making this video , This is just what i needed as my yubi's are being shipped , Thank you sir .

  • @AllThingsSecured

    @AllThingsSecured

    6 ай бұрын

    Glad I could help!

  • @FallkyrieLynner
    @FallkyrieLynner11 ай бұрын

    Hey, i just got my Yubico key thanks to you.

  • @AllThingsSecured

    @AllThingsSecured

    11 ай бұрын

    Awesome! Enjoy it. 👍🏻

  • @kristinlow1205
    @kristinlow12054 ай бұрын

    This was a great intro - thank you. The same flow in 2024 now includes passkeys, and it's quite confusing how the two concepts relate to each other.

  • @sidi4735
    @sidi47352 жыл бұрын

    "my wife and I have each other's backups" 👌🏽perfect line right there.

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    Thanks, Sidi.

  • @Bushchannel
    @Bushchannel Жыл бұрын

    Love your vids man.

  • @AllThingsSecured

    @AllThingsSecured

    Жыл бұрын

    Thanks so much!

  • @fredrickcallahan4292

    @fredrickcallahan4292

    Жыл бұрын

    @@AllThingsSecured Hi Josh, Thanks for your content, you're the first guy I watched who really explained YubiKey in an easy to understand manner and I've finally gotten to assigning my 3 NFC 5 YubiKey's. Q: Is it possible as a last backup to print the QR code (Yubico, Google Authenticator or both) and keep it in a security lock box? In case my keys get lost, or I pass on, and have the QR codes attached to my will and last rites?

  • @EvaderGuy
    @EvaderGuy7 ай бұрын

    Hello, great content, thanks for sharing your knowledge. I have an iPhone, iPad and iMac. Would you suggest nothing types of keys (plug in and NFC)? 7:22

  • @abimaeljr1
    @abimaeljr1 Жыл бұрын

    Thanks by your video!!! Very good material Which adapter to USB C to USB A did you use on the video? Do you think I could use any kind of adapter on Yubikey? I am Brazilian and Yubikeys are very expensive here.. so I would choose only one to use in several devices another question: So far I read about use Yubikey NFC with Ipad but it seems that NFC does not work. It seems that I HAVE to buy an Yubikey 5Ci to use lightning . Is that correct ?

  • @walterharris6311
    @walterharris63112 жыл бұрын

    Awesome thanks 😊

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    My pleasure, Walter!

  • @Alfonso6143
    @Alfonso6143 Жыл бұрын

    Excelentísimo video saludos.

  • @ikust007
    @ikust0072 жыл бұрын

    Thank you !!

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    You’re welcome.

  • @Cheyenne07
    @Cheyenne072 жыл бұрын

    Another great video. I've just received my Yubikey 5 on the basis of your brilliant tutorial. I want to ask, would it be possible to have a video to show how to remove a key should you lose it. I'm sure its pretty easy. Many thanks.

  • @tainshabinnez9679

    @tainshabinnez9679

    2 жыл бұрын

    I just got my first Yubikey the other day and I did a bunch of reading so I may not be an expert, but they stressed that you should get two keys 'cuz if you lose one, you'll never get into those accounts again. They even recommend that you put the 2nd key somewhere offsite and preferably in a fireproof box/safe.

  • @Carlosjousuesalcedo
    @Carlosjousuesalcedo2 жыл бұрын

    Thank you with this video !!! This video helps !!!! !!!!! 😎 !!!

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    Glad to hear it.

  • @Carlosjousuesalcedo

    @Carlosjousuesalcedo

    2 жыл бұрын

    @@AllThingsSecured 😎 !!!

  • @yamahatracerclub
    @yamahatracerclub10 ай бұрын

    Thanks for the information, just purchased me 4 of those. Can you please let me know if I setup the yubikey as my authentication should I remove all other 2FA options? Let’s say remove the sms option? I’ll be glad to know. Thanks 🙏 again

  • @pedroblanco8311
    @pedroblanco83112 жыл бұрын

    Hi Josh, 1st I'm relatively new to your channel, and I'd like to thank you for taking the time to upload a text file for your videos. This allow a multilingual household to watch this with excellent subtitle language options. 2nd, I've listened to this video twice. It's very good, and I'm quite close to buying one of the Yubikeys you presented, however have an important question. How many google or gmail accounts can I pair with one yubikey? I heard you say that your wife has you covered on her keys, and you do the same for her, and this makes sense, however do you know what the limit is for one key? If you already have a video covering this, please send the link in your response, and I'll watch it. Your language functionality is very much appreciated! Thanks for your help

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    Thanks, Pedro. I don't believe there is a limit to the number of accounts you can use with one key, although the number of keys you can use with one account is limited by the online account (i.e. Google). So glad the captions are put to good use! I'll keep having them transcribed.

  • @pedroblanco8311

    @pedroblanco8311

    2 жыл бұрын

    @@AllThingsSecured Thanks Josh!

  • @plamentodorov8468
    @plamentodorov84682 жыл бұрын

    Hey Josh - great content! A quick question to you - if you come across a website that supports both an app and physical key authentification, do you set up an app authentication too or do you stay with only the key? Say, for example, you have an Authy authentication set up but eventually you also purchase a Yubikey - would you kill the Authy authentification or keep both running in parallel? Thanks and cheers!

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    Great question. It depends. Sometimes I keep the authenticator app setup as a backup. So if the website allows me to setup multiple 2FA keys, then I prefer to do that. If not, then I'll setup the key as my primary and the authenticator app as the backup.

  • @plamentodorov8468

    @plamentodorov8468

    2 жыл бұрын

    @@AllThingsSecured Thanks Josh - appreciate it! Keep up the great work you're doing!

  • @virgilwalker683

    @virgilwalker683

    Жыл бұрын

    If you have someone that wants to exploit your account or your device, and they using a Linux to hack your account or your device, You have to set up another key.

  • @gossedejong9248
    @gossedejong92482 жыл бұрын

    thank you, Sir!!!!

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    You're welcome! Hope this helped 🙏

  • @Josh-py9rq
    @Josh-py9rq Жыл бұрын

    The yubikey also survives the washer I accidentally had to test this out and it still works like a charm 😂

  • @Jool4832

    @Jool4832

    5 ай бұрын

    Which Yubikey model survived the washer?

  • @mitchellquartero
    @mitchellquartero Жыл бұрын

    I’m planning on buying it thanks

  • @AllThingsSecured

    @AllThingsSecured

    Жыл бұрын

    Good for you 👍🏻

  • @RozemVlog
    @RozemVlog2 жыл бұрын

    How about if the person trying to log in using key loggers will they be able to log in your KZread channel if you are using security key?

  • @eganzale
    @eganzale2 жыл бұрын

    Do you know if consumers can use the 5C FIPS series keys? I'm wondering if the regular 5 NFC series differs from the 5 FIPS series other than the added level of security on the FIPS. I ask because I'm wondering if let's say you want to secure your gmail account with the regular 5 series, can you also do it with the 5 FIPS series? Or are most accounts the average user utilizes only compatible with the regular 5 series and not the FIPS series? If I can still use the FIPS series that has government level 3 encryption vs. the regular 5 series, which only has level 1 encryption, than I'd rather just make the investment and pay slightly more for the FIPS version and get added security but I'm not sure if it's ONLY for government use or can regular consumers use it to and for the most part it would still function like the regular 5 series but with the added protection? Thanks for making your content, it's valuable in today's digital world 👍❗

  • @philmarsh4732
    @philmarsh4732 Жыл бұрын

    so once programmed i can remove key from usb port untill required again yes ? can i just leave key in port all the time ?

  • @markwinter5655
    @markwinter5655 Жыл бұрын

    Question. If I use the Yubikey can I eliminate the use of the authenticator app or do you recommend both?

  • @bretr5886
    @bretr58862 жыл бұрын

    As always great video. I do have one question so far lol. My key chain has a pretty strong magnet on it will this affect the key's data?

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    I don’t think so, but as with anything electronic, I think it might depend on how strong the magnet is.

  • @pnachtwey
    @pnachtwey Жыл бұрын

    I have a yubi key but I can only use it with Google and Microsoft for now. My brokerages, banks, medical site do not support it...yet. It a good idea but it is too early now.

  • @martincday007
    @martincday007 Жыл бұрын

    Yubikey 2FA is a great idea, but since Microsoft dropped support for signing into Windows it is pretty limited, also it is hardly cheap, especially as you really need two for backup. When the Yubikey is supported it also has to made the only way of signing in, what would be the point of Yubikey if you could bypass it by signing in using an alternative method. Finally it is very personal and you need your Yubikey with you, that could be very frustrating if you find yourself out and about, needling access, but with no key.

  • @donaldjeansonne8667
    @donaldjeansonne8667 Жыл бұрын

    Can you explain the maximum number of login 2FAs on a single key? Is it possible to use the basic FIDO or other method on some sites and get more access on a single key? Is this practical or not? Thanks for your videos.

  • @namasterising
    @namasterisingАй бұрын

    do you have a video to do this with your amazon account? thanks!

  • @philmarsh4732
    @philmarsh4732 Жыл бұрын

    hi great vid i have desk top with windows 10 my sis has desk top windows 11 my mobile is old i5s that i use for 2 step verification so whats best yubikey 5 or 5 nfc

  • @adeshsaxena5203
    @adeshsaxena5203 Жыл бұрын

    Nice video

  • @dalriada842
    @dalriada8429 ай бұрын

    I've just bought two of the type A Security Key NFC ones. The 5 series is more than twice the price in the UK. I'll stick to using a free authenticator app for that additional functionality. It's a pity they don't have a version with type A on one end, and type C on the other. Only two of the machines I use have type C. In hindsight, I should maybe have got the type C for future proofing, and used adaptors left plugged in to the devices, but I didn't think of that. It's better to phase out the need for adaptors over time, as type C takes over, rather than increase the need to use them.

  • @ikust007
    @ikust0072 жыл бұрын

    Finally !

  • @MichaelSoulier32Pens
    @MichaelSoulier32Pens Жыл бұрын

    Question: If I set up 2 keys with identical secrets on them, then if I lose one, should I not immediately consider those secrets compromised, which makes the second key pointless? Should I not instead set up both keys with different secrets?

  • @Wandering_Horse
    @Wandering_Horse2 жыл бұрын

    Informative video, my yubi keys literally just shipped today. I purchased a 2 pack of the NFC 5, I got the USB A style so I can use it with my PC. I am hoping I can set it up on my phone which is USB C since I won't physically be able to plug it in....hmmm

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    You can always use the NFC (just tap on the phone instead of plug in).

  • @LimitedWard

    @LimitedWard

    2 жыл бұрын

    NFC is way more convenient for mobile than plugging it into your phone's charge port anyways.

  • @bryanvetor4529
    @bryanvetor4529 Жыл бұрын

    For us budget people lol, can I buy one key and use multiple 2FA methods or is it restricted to one? Or does it depend on the service. I'd like to have multiple options.

  • @thetourminator
    @thetourminator2 жыл бұрын

    Windows question: Are the YUBIKEY series 5 products compatible with Windows 7 ? Or compatible with only Windows 10 and above?

  • @Mark.Richter
    @Mark.Richter Жыл бұрын

    Great video. Tried your code on YubiKey and it says it isn't valid. Also, searched your videos, but couldn't find any on protecting yourself when using public wi-fi, do you have or plan to do a video on that?

  • @thegreatfilter2413
    @thegreatfilter24132 жыл бұрын

    hi . Thanks for the info! Perfect timing. Once I have the yubikey set up do i delete the Google Authenticator 2FA app form my phone? or do they both work together now ie authenticator only works with the yubikey. Thanks in advance

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    They can both work together. If you want to delete Google Authenticator, I would first export your codes to a single QR code, just to be safe. 😎

  • @JaredJacobsonLaw
    @JaredJacobsonLaw2 жыл бұрын

    Nice thx 🙏

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    No problem 👍

  • @userEllipsis414
    @userEllipsis414 Жыл бұрын

    Question, A Yubikey must contain some sort of software... is there any open source software that works in a similar way that you could..for example install onto a drive dongle ? Be interesting if you could make your own key.

  • @claystone7729
    @claystone7729 Жыл бұрын

    The Older versions of the Google authenticator app does not contain and export feature? I will more than likely just have to use my old phone long into any accounts and disable and re add the app to the new phone.

  • @jvianneyjr
    @jvianneyjr8 ай бұрын

    What's the Best yubikey 5 NFC or yubikey security key NFC? Whats the diference?

  • @paulkennedy4305
    @paulkennedy43052 жыл бұрын

    Just found you and subscribed. Good content. Thank you. Question -- What if your computer is stolen and you have g mail set to recognize your computer and the person has your password with 2FA SMS code popping up on your Macbook message window- is your g mail account accessible without the Yubikey when your Yubikey is not set up to lock your computer? Thank you.

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    Great question, Paul. If your computer was stolen, the person would first need to hack your password to get into the computer (you do password protect your computer, I hope). After that, yes, they would have access to your email account. Thankfully, if your computer were stolen, you could easily log into your Gmail account and tell Google that this device is no longer trusted, and NOW they won't be able to log in without your password and Yubikey.

  • @paulkennedy4305

    @paulkennedy4305

    2 жыл бұрын

    @@AllThingsSecured In addition to executing your steps mentioned above - I just found out I should also 'turn off' text message forwarding on my phone. Glad I found you. Thanks.

  • @spi1141
    @spi1141 Жыл бұрын

    I have NFC 5 and I downloaded as you instructed for the login on Win10 but it's not working, or perhaps I missed a step. Did you say to use the Microsoft login or the Yubikey login to start things. Fortunate for me I have the option of using the Microsoft key to get to my desktop but I want the encryption that Yubikey provides. Thanks.

  • @talamakara
    @talamakara Жыл бұрын

    Am I the only one that questions using a security feature which has 0 security controls? NFC has no security in it at all, so how do these prove they are still secure?

  • @lunadefuego6325
    @lunadefuego6325Ай бұрын

    Thanks for this very useful video. So if my main key is a Yubico, can the spare/s one/s be from another brand?

  • @AllThingsSecured

    @AllThingsSecured

    Ай бұрын

    Sure, they can if you want to.

  • @sahinsarkar7293
    @sahinsarkar72932 жыл бұрын

    we can only use 2FA if the website we are authenticating in provides it, am I right? If yes, then how do we use 2FA in sites that don't provide the option?

  • @hombrenuevoacts1728
    @hombrenuevoacts17284 ай бұрын

    Do the key manufacturers keep a copy of your key like ledger nano x has done?!

  • @philmarsh4732
    @philmarsh4732 Жыл бұрын

    hi , can yubikey be used to set up 2fa on usb router port for more security

  • @PaulTodd-ec9bw
    @PaulTodd-ec9bw Жыл бұрын

    Not sure why…but iPhone when 2fa is activated with security keys will still allow you to change your iCloud password word using a trusted device, IE, faceid or passcode, but still doesn’t require the YubiKey to verify? What’s the point if someone has your passcode and youre trusted device?

  • @dazzawm4776
    @dazzawm47762 жыл бұрын

    I am having trouble using my Yubikey and Google account on my Android phone. When it asks for key I hold it on the back via NFC but then it gives me some options to 'open with'. What do I choose as it won't allow my account any further?

  • @adamkhan2646
    @adamkhan26462 жыл бұрын

    Probably the craziest thing is I just got my Yubikey 5c and standard 5 today lool

  • @jerrykong8819
    @jerrykong88192 жыл бұрын

    Does this protect your against someone stealing your laptop and using a boot up file?

  • @dickthompson9129
    @dickthompson9129 Жыл бұрын

    I have been searching for a clear answer to how to use YubiKey as a 2FA for Microsoft Onedrive Personal Vault. All discussions that I have read so far confuse me. Am I missing something? Have you discussed this anywhere? Please advise. Thanks.

  • @AlexandriasTech
    @AlexandriasTech2 жыл бұрын

    I just got a pair of Yubikeys. I'm debating if I still want to use it to lock down my computer lol!

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    I know what you mean. For me, I don’t - it’s just not necessary.

  • @DRKASSIANO
    @DRKASSIANO Жыл бұрын

    HI, Do you guys recommend to get 2 for backup?

  • @michaeleichner7522
    @michaeleichner7522 Жыл бұрын

    Great video. I have a few questions: 1. Am I correct in my understanding that Yubikey will work on every website that uses 2FA? In other words, any site that isn’t setup to use a security key, can use the Yubikey authenticator app instead of the key? 2. How will I know BEFORE I try to login if I need to use the Yubikey authenticator app, or my Yubikey without using the Yubikey authenticator app? 3. You mention using Yubikey and 2FA when logging into websites. Is the process the same when logging into an IOS or a Windows app? Thanks Thanks

  • @naytoeaung

    @naytoeaung

    Жыл бұрын

    1. True, it works on every website that offers 2FAs, and you can use Yubikey authenticator app instead of the key when the site doesn't offer the physical keys as 2FAs methods. Yubikey/ Yubico Authenticator app has the same functionality as google authenticator, Authy, etc,.. but it stores in the key, which is more secure than those google and Authy. 2. It depends on which method you set up as the 2FAs options. If you set up with Yubikey, the site will ask you to provide Yubikey. Likewise, if you set up with the authenticator app, the site will ask you for the 2FAs code that the yubikey/ yubico authenticator will provide. If you set up both methods as the 2FAs in the particular site, the site should ask you to make the choice between the physical key and the authenticator app. 3. The process is the same as using in ios, android, windows, mac or linux if you set up with the yubikey/ yubico authenticator app. For the physical key option, I find that some ios/ android app doesn't accept it, which means you can authenticate only with the authenticator app. For example, Proton Mail iOS app.

  • @shaned7545
    @shaned75452 жыл бұрын

    Need to download Yubi app just to read the codes???? Does this depends on the type of Yubi key being used???? I saw some tutorials wherein they don't use Yubi app just to read the codes.

  • @tradehut2782
    @tradehut2782 Жыл бұрын

    What is you lose the ubikey or it gets damaged or just stops working after a few years?

  • @boardgameguyboardgameguy9194
    @boardgameguyboardgameguy91945 ай бұрын

    What if they have remote desktop viewers on your laptop? Do they bypass the Yubikey?

  • @AndreaCTSmith
    @AndreaCTSmith8 ай бұрын

    I have a son I want to keep off of the internet when he is not being supervised. Is there any device enabling pc lockdown...as opposed to accounts?

  • @medbond007
    @medbond00710 күн бұрын

    I've bought 2 yubikey, should i delete google google authenticator ?

  • @nylimoman
    @nylimoman8 ай бұрын

    if i set up 2fa yubikey with a bank account on 1 computer then log in on a different computer do i need the key on both computers?

  • @paulbeattie
    @paulbeattie2 жыл бұрын

    What happens if you lose ALL your physical Yubi keys... it there a backup way to get back into your accounts or even get a replacement key? I suppose if there was it would defeat the purpose but the risk of being permanently locked out is definitely a problem.

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    You’re exactly right, Paul. Most accounts give you backup codes that you can print out and keep in a safe if you want. The bottom line is this: when you’re responsible for your own security, you need to be careful!

  • @DominicVictoria
    @DominicVictoria Жыл бұрын

    I personally don't use Multi Device because it increases the attack surface area in two ways. 1 - Being in another server and has to sync once in a while, 2 - That's another device they can hack

  • @Topknot60
    @Topknot602 жыл бұрын

    Thank you for a very helpful video. If you would just clear up one thing: can I set up my Yubikey authentication for sites that I access using my computer and use the same Yubikey plugged into my phone to receive the authentification code on my phone and then enter it physically on the computer. I like the idea of placing an air gap between the computer where I am doing the business and a phone where I can receive the code.

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    Yes, you can. You can run the Authenticator app on your phone, use the key to verify and then type in that code to the computer.

  • @Topknot60

    @Topknot60

    2 жыл бұрын

    @@AllThingsSecured Thank you for your response. It's a great help!

  • @bobby350z
    @bobby350z Жыл бұрын

    I wish more financial companies, banks would offer support for 2FA keys. Right now only a few do so. And some out of those, won't even allow you to disable SMS option, bummer.

  • @PaintingWithYovette
    @PaintingWithYovette2 жыл бұрын

    I am confused. Do you need a different key for every gmail account, and youtube account? Also do you need a different key for each computer you have, or can one key be used on multiple computers?

  • @NoEgg4u

    @NoEgg4u

    2 жыл бұрын

    I will try to answer. But I am not 100% certain of my answers. I think that I understand the process. But I never used the Yubikey. Hence, my not being 100% certain. When you use the Yubikey to log in to web sites, you are telling those web sites that your password consists of 1) what you typed in to create the account, and 2) some data that is stored on the Yubikey flash drive. So just as you can use the same password on multiple sites, I am nearly positive that you can use the same Yubikey for multiple web sites. When our host stated that he has a backup Yubikey, I believe that that means that he has two flash drives (two Yubikeys) that are both registered with his web sites. Therefore, he can use either of his Yubikeys. The web sites probably do not care which one he plugs in. Either one should work, because our host registered both of them with the web sites. As to you question about needing a different key for each computer: My guess (and I am pretty sure about this) is that you can use your Yubikey on as many computers as you choose (just as using the same password on as many computers as you choose). I highly doubt that when you use your Yubikey on one computer, that some record is made to disallow you using your Yubikey elsewhere. And whether you use a Yubikey, or you do not use a Yubikey, you should never use the same password on more than one site. Although, for people that will still use the same password on multiple sites, then the Yubikey will make their account less vulnerable (I think). Maybe our host will confirm the above, and point out if I got something wrong. Lastly, if someone has physical access to your computer, then nothing (short of full system-wide disk encryption) will keep out a skilled attacker from gaining access. There are free tools that can be installed on a bootable flash drive that will defeat all login measures. Cheers!

  • @PaintingWithYovette

    @PaintingWithYovette

    2 жыл бұрын

    @@NoEgg4u Wow, thank you for that detailed description. I have been searching for a long time and getting no answers from anyone, including this host. So I thank you again. It all made sense what you provided! 🥰

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    You don’t need a new key for every account and device. The same key can be used for all your accounts and devices at the same time, and I recommend you also have one extra backup key for all those same accounts and devices.

  • @PaintingWithYovette

    @PaintingWithYovette

    2 жыл бұрын

    @@AllThingsSecured Gosh, thank you so much. Finally an answer simply put that I can understand

  • @greggpalmer8901
    @greggpalmer8901 Жыл бұрын

    Hi. Thank you for your video. It is very informative. I am a big advocate of privacy and security. One of the questions I have is does the key allow for access only via a password. My concern with the key is that if it is obtained, it could be used to open accounts or log into websites. I am personally not a fan of biometrics (fingerprint scan or facial recognition) because neither are protected under the first or fourth amendments. A simple password is however protected under the first amendment and a person cannot be compelled to provide that information by a law enforcement agency.

  • @AllThingsSecured

    @AllThingsSecured

    Жыл бұрын

    Hey Gregg, the 2FA key can’t be used in place of the password - it is a *second* form of identification, so even if somebody stole your key, they would still need to know your initial password to get in. Does that answer your question?

  • @henriquedossantos6519
    @henriquedossantos6519 Жыл бұрын

    Hi there Josh. One question I have, all my authenticator codes are on google authenticator app, and I want to transfer them all on my Yubikey as backup. Is this possible? or for each of my codes, I have to do this manually? I preferred to key the Yubikey rather than a mobile device or tablet. Thank you, keep up the good videos informing the community.

  • @AllThingsSecured

    @AllThingsSecured

    Жыл бұрын

    Unfortunately yes, any transfer has to be done manually at this point, which is frustrating and time consuming, I know.

  • @NathanShepard
    @NathanShepard Жыл бұрын

    What if you loose your key? I am just looking into this and curious.

  • @Healing4me2
    @Healing4me2 Жыл бұрын

    I'm extremely new with this Yubikey device. My crypto app Newton, on my android phone now requires me to use this for security.. I only want to use it for the Newton app for now. Can you do a video for how to set it up, or refer me to a video that does ? thanks

  • @pedroblanco8311
    @pedroblanco83112 жыл бұрын

    Hi Josh, which of the Yubikey products would you suggest for a first time user? I'd take your advice, and buy 2. I'm not excited about the fingerprint or biometric option. I have used an iPhone in the past, however currently am using Android. Lastly, I'd just like to double confirm I understand an important detail. If I have 3 separate gmail accounts, I can use the same 2FA key for all 3?

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    For most people, I think the Yubikey 5 NFC is the best option. However, if you're deep in the Apple ecosystem, it makes sense to purchase both a 5Ci (for the Apple connector) and a 5 NFC. And yes...you can use the same two keys to lock up as many Gmail accounts as you like 👍

  • @pedroblanco8311

    @pedroblanco8311

    2 жыл бұрын

    @@AllThingsSecured This is extremely helpful! Thank you Josh!

  • @chrisrjrose
    @chrisrjrose Жыл бұрын

    My Windows and Mac computers both ask me for a PIN before I use my Yubikey. So I am enter username, password, interting Yubikey, then the PIN then touching then Yubikey... It's way too many steps. What am I missing as this seems to me to be too many steps...

  • @georgepapadakisart534
    @georgepapadakisart534 Жыл бұрын

    Why would Brave and Windows security pop-up when activating a YubiKey for the first time?

  • @ikust007
    @ikust0072 жыл бұрын

    Been waiting for you to make that for a long time . And now: show us how to create PW with them.

  • @AllThingsSecured

    @AllThingsSecured

    2 жыл бұрын

    Thanks for the ideas.

  • @jerrysanders9101

    @jerrysanders9101

    2 жыл бұрын

    Yea I’m still a little confused about how to use the back up key if it’s separate setup.. are both keys set up identical passwords ? Any info is appreciated and great job on the video. Best one of 5-6 I’ve watched .

  • @manny7886

    @manny7886

    2 жыл бұрын

    You don't create passwords with your YubiKeys. You create PW with your PW manager.

  • @manny7886

    @manny7886

    2 жыл бұрын

    @@jerrysanders9101 - The setup is the same (not different as he mentioned). As far as the backup key, the site doesn't know if you are using a backup key(s) or not. It just checks its database. If the key you inserted is in the list then you gain access to your account.

  • @jerrysanders9101

    @jerrysanders9101

    2 жыл бұрын

    @@manny7886 thanks for the reply and info Manny.

Келесі