Links mentioned:Go to my link, yubi.co/shannon-2024 to automatically get $5 off a Yubikey 5 NFC and start securing your accounts today! Where to find key covers: www.etsy.com/search?q=yubikey holder&ref=auto-1&as_prefix=yubikey amzn.to/440gbD0 Design info: www.yubico.com/blog/why-we-designed-the-yubikey-the-way-we-did/ My 2FA Playlist kzread.info/head/PLeYHKbaShxTE4NCIUP88sEZmW0NgPORSB&si=flzjgeDw4Pv5AQqK

I have a USB-A Neo version from 2012 on my car keychain with a bunch of other keys. Carried in my jeans, dumped in the centre car console, exposed USB-A pins and all. Still working fine with daily use. Basically bomb proof. They don’t need to be coddled

@ShannonMorse

29 күн бұрын

They really don't need to be coddled at all! My oldest one is about that old as well and still works.

@Bill_the_Red_Lichtie

28 күн бұрын

Same here, I have a couple of USB-A to USB-C adapters for those that don't support USB-A or NFC. I always have one on my key chain and never had any issues with it.

@Dobbo314

28 күн бұрын

I have two Yubico keys, got them over a year ago with a discount from Shannon. One lives on my keychain, the other on a lanyard by my Workstation. The one on my keychain guarantees. I always have one with me.

@manny7886

28 күн бұрын

I have one about that old. I lost it in an airport parking lot where I used to work. Luckily I found it the following day. By the look of it, cars run over it several times. Still works to this day.

@2011k1500

28 күн бұрын

I've carried one in my pocket on a key ring for all of 5 years. Never had a problem with it. It has never been coddled.

I have 2 Yubikey 5 NFC keys and am so happy with them. They are worth the money and security.

I appreciate that your explanations are always thorough. The house key/locksmith example to explain the concept of security key management is great!

@ShannonMorse

29 күн бұрын

Glad it was helpful!

I recently bought a set of 5 NFC yubikeys. This video series has been very helpful. Thanks Shannon!

@Bill_the_Red_Lichtie

28 күн бұрын

I bought the coloured sticker skins, so I name them in the various apps with the sticker colour.

Thanks for this video! The Yubikey I have on my key chain I use a Keyport Pivot 2.0 to protect it from being damaged. Works pretty well.

@ShannonMorse

29 күн бұрын

Thanks for the info!

@Makaveli6103

16 күн бұрын

Bought one after I saw your comment. Great recommendation! It is great and holds the few keys I have and my yubikey.

@OinkPink1

16 күн бұрын

@@Makaveli6103 Awesome! Glad I could help

Ahhh, my trusty Yubikey! At my side each and every day!

Thanks for sharing. Blessings on your day.

@ShannonMorse

29 күн бұрын

Thank you too

Great video, Shannon. I do enjoy this series. @6:03 that jeans pocket was designed for a pocket watch.

Thank You Shannon! Another great video! I wish more websites offered Yubi key. I am sick of being hacked!

@ShannonMorse

29 күн бұрын

You are so welcome!

@AngryIrishman0007

29 күн бұрын

@@ShannonMorse I am looking for a Ai device modem, VPN, router that has Ai built in that would help prevent hackers. Do you have any suggestions?

I understand the premise of asking an out of state friend/family to store a backup, but how do you update it when you add new accounts? Sounds like a burden on whoever is storing the backup if they need to send it back to me once in a while

Id like to see you do a video about tracking while you are in your car and what if anything you can do to either stop this or reduce it.

Nice one 😊

@ShannonMorse

29 күн бұрын

Thanks 😄

Interesting about the cases for the yubikey, I always keep my main one (5C NFC) on my keychain with one of those little lanyard things. On the same keychain, I have a flash drive (also with a lanyard) with my house keys. These come with me daily, multiple times a day too since the dog demands her walks! 😂 I haven't had any issues though I do keep a spare in a safe just in case I do ever destroy/lose it. I did start to get chipped corners before the 5 series but it still worked and obviously eventually replaced it when the 5 series was released.

I accidentally put my 5C nano in the washing machine (it was in my pocket) and then it went through TWO dry cycles until my wife found it getting the next load from the dryer. Works fine, no issues. Not recommended, but these things are tough.

I wasn’t signing into a new device I had purchased 100 and $200 at least on three UB keys. Nobody gives the barn and I had to change my 20 year banking routing and account you know and now you’re saying all I need is one key I have never heard that but then again Iwatch pay it forward and generally their spot on two keys is a mandatory and I’m speechless

A good tip is if you have multiple keys, take some nail polish or mark them some way to differentiate between them. I put some dots in different colors, and name the keys after the colors. So if I have a red key and a green key, and I lost my green key, I can go into the website and delete that green key. Also, to correct a misunderstanding out there - these 'touch to activate' they don't use your fingerprint, they don't store your fingerprint, it's just like pressing a button. Just in case some website randomly asks you for your key, and you're not setting up authentication, that you don't touch it and cancel the prompt.

On installing yubico key a message flashed up handshake was captured. Is that normal? Thanks Shannon 👍

One thing I think people really have to do is set a PIN on the YubiKey. If it is lost or stolen it adds another hurdle to authenticating with your hardware token.

@Bill_the_Red_Lichtie

28 күн бұрын

@@beatrix_victoriastation I don't think you understand, the key allows only a limited number of "wrong pins" then it deletes the contents. There is no way to brute force a YubiKey with a PIN.

Forcing re-auth should be a personal choice. As Shannon says, your life is yours to design for your personal security. What I didn't hear Shannon say, if you're being forced to re-auth each time with a password, look for the "skip password when possible setting in security settings", and/or make sure that you're allowing that site to store cookie data on your device/browser. (I'm not making recommendations, just troubleshooting.) Great vid as always, Shannon!

@ShannonMorse

29 күн бұрын

Yup! I didn't go into tons of detail in this overview video, but I have explained similar in my "cookies" video.

Can you answer this question please.. If I'm using Bitwarden, and have 2FA running on it too, but only way to access my Bitwarden is having my yubikey, is this safe? Or do you recommend not having 2FA's on Bitwarden in general?

This may be a daft question, I recently got 2 yubikeys. I attempted to connect them to one of my gmail accounts. I ran into a problem where it didnt matter which key I used first it would then tell me I could not assign a key meaning I could never set up a backup key. I ended up deleting the key that I had set up as I didnt want to risk being locked out if I lost this ne key. Is this something you can advise on?

Hi, trying to buy 2 usb c keys but the system only applies the coupon to the usb a key, is that normal? do you have a link for usb c keys?

Hi Shannon, on installing a Yubico key, a message flashed up on screen. Handshake was captured. Is that normal ?

What about the yubikey static password options, I type in a password then add the static password to the end so its less shoulder surfing vulnerable + it adds 32 extra characters to my memorized password.

I've had my google fido1 on my keychain for 4 years. NFC still works but usb stopped working after 2 years. It's not detected when I plug it in a computer...

They're fine on a keychain... it's pretty much all covered (injection molded) in plastic... you are more likely to loose it if you keep it in a case separately.

When is someone going to make a wearable ring that operates like a yubikey, and is usable for U2F authentication? I want one, but all the smart rings either require charging, or can't do U2F

I have three Yubikeys. Occasionally I will misplace one...or maybe leave it at a friends house. I get real uncomfortable taking my only key out of the house when that happens. I've never lost one. The thought of being down to one key makes me uncomfortable. I don't like to set up codes as a backup if I don't have to. It is one more way for hackers to try and get in. I like just one way in.

5:32 So USB-C isn't durable for a hardware security token? An additional layer of damage protection for the HW is required? My "old" USB-A token (5th gen USB-+NFC) has been serving me well in my pocket on my keyring (with change, and all the other stuff that trouser pockets endure).. I think that the Lightning key is as hardy, but I really never thought of the "delicate" USB-C connectors being a problem, but they obviously are. Thanks for the heads up, sticking to hardier USB-A tokens in the future.

@ShannonMorse

25 күн бұрын

That's not what I said. If I was carrying a USB-A token, I'd put it in the same zippered pouch or pant pocket as well. tbh though, all of mine are still in excellent condition, including my older USB-A ones. I've shown all of them in my playlist of 2fa vids.

@Bill_the_Red_Lichtie

24 күн бұрын

@@ShannonMorse I was wondering though, you said about things being able to "poke the inner pieces of this little port". I think that statement is absolutely correct, if I had Key with USB-C, I would definitely want to keep that delicate connector protected. What we have been saying though, is without any additional protection, the older USB-A style keys are still going strong.

2 problems with the yubikey. 1: flat contact area .I have had usb with flat contact area and they don't always make contact.2: Why doesn't the contact area retract back in like some usb key do.

I went to login to KZread in my Tesla vehicle, on built-in screen. It asked for my YubiKey and I was like YIKES!, but after reading the screen more, I saw if I canceled I could choose another option to authenticate and thankfully I had also enabled my 2FA authenticator. So in some cases you may find the device won't accept a Yubikey. The Tesla may accept a Yubikey as there are USB ports, but I wasn't sure that would work, so I was glad I had enabled a second 2/M FA option. Anyone know if you can use a Yubikey to authenticate to Google in a Tesla?

Oh and add a magnetic USB break adapter and run buskill with a lanyard around wrist like a jetski kill leash, autolock!

Some websites still only accept one phone with a camera (biomatric) to create PassKeys and no secondary Passkeys allowed. The problem is that I could not trust a phone as much as a hardware key. The waiting is just too long.

Great video Shannon! Quick question: How does having your Yubico key scanned with x-ray while going through a security check at the airport affect the functionality of your 2fa key?

@LazyJones

28 күн бұрын

I travel with mine quite a bit and they don’t seem to be impacted at all by X-ray. It’s just the same as throwing your laptop and mobile through

@michaelekpo4011

28 күн бұрын

@@LazyJones Thanks! I've had my laptop scanned multiple times too. Currently studying for one of the CompTIA certifications and I came across somewhere that suggests you could request the security officials at the airport to do a manual check of your laptop instead of sending it through the x-ray to prevent any damage to the internal components. That left me thinking that a 2fa key might suffer same fate.

@LazyJones

28 күн бұрын

@@michaelekpo4011 Always a risk I guess. Has to be weighed against the risk of being delayed while they do a cavity search because you asked for something odd and made them do some additional work. I’m the type of guy that installs PC hardware without a static strap, so take my advice with a grain of salt 😀 Gamma irradiation sterilisation, that can sometimes occur to baggage, is probably where the “Xray damages hardware” myth came from. Gamma will mess up a lot of hardware but I’ve never had Xray do that.

@ShannonMorse

28 күн бұрын

I wear an anti static strap when I record myself on video building pcs... But I sure as heck throw my laptop in an X-ray and don't wear one of those straps whenever I build pcs off camera 😂😂😂. I think we are overly cautious sometimes as a whole. My circumstances don't really need that much caution. (And my devices are all fine).

@LazyJones

28 күн бұрын

And besides, that's what the stickers on your laptop cover are for; Gamma, Cosmic and X-ray blocking. It's why Yubikey sell the vinyl skins ;)

Ok, you convinced me, but I want to use the $5 discount, but will not let me get the YubiKey 5C NFC 😞

I find the keys quite expensive (even with the discount), especially considering you advise people to buy 2. And perhaps yubico should provide a multi pack. (2 for 90 or something like that)

@Supermath101

22 күн бұрын

If you only need the FIDO2 capabilities, the Security Key series is $25-$29 per key.

I am new to security keys. I like them a lot, but there are two things people must understand. One, you need to make sure you think about OTHER 2FA’s. If you leave phones, emails, passkeys, or biometrics turned on, then you and hackers can still go around your security key. You need to turn that stuff off or remove it if you want to go all in on security keys. Two, just because a particular company allows keys for their website does not mean they also allow them for their app. Vanguard is one such company. Even you opt not to use the app, a hacker can still get in if they figure out your password and your security question (Assuming you leave 2FA by cell phone or email turned off). Don’t get me wrong, this is good, but it’s not on the same level as a security key. This oversight does not speak well of the company, but aside from that, it is important you check both websites and apps to make sure they are both work.

Can you use then if you run linux os?

@bugdozer314

29 күн бұрын

Yes, everything seems to work fine on relatively modern distro (and has for several years). I use PopOS (ubuntu based), and the Yubikey Authenticator app is a simple package install already in the base repo. This includes browser integrations (chrome + firefox). If you want to use Yubikey for SSH key generation, prefer the 5 series. Either the 4 or 5 series works fine for OTP and U2F/FIDO stuff.

@StephanieDaugherty

28 күн бұрын

Works perfectly well on Linux, on some really old distros you might have to tweak some udev rules before it works as a security key. Anything vaguely modern, and it will work out of the box on Linux. And all the various utilities that go with it work on Linux, such as yubioath (used for TOTP), or the personalization tool (used for configuration of some of the more obscure protocols the yubikey supports) If you just want it to work as a security key though, it will just work, and you won't need any extra software

@AlexandruCucu

21 күн бұрын

They works as a HID device so no special drivers are needed.

With passkeys being accepted so widely now, is it worth a non celebrity to purchase a $50 more more hardware 2fa key?

@gotaproblemwithmyname9331

27 күн бұрын

I think the real question to ask is how much damage could someone do to you if they had access to your important account information. Also consider your understanding of security, you may not have much exposure to bad habits. If 50$ can save you frome losing that money and you aren't 100% confident in your security habits, I say it's worth it easily

When will the ability to use Yubico instead of fingerprint or pin unlock the phone? It would have been something.

Wait if I get my new Yubikey, can my account be inked to 2 seperate keys?!

@AlexandruCucu

21 күн бұрын

Usually the answer is yes. Personally, I use two Yubikeys and a software passkey from Bitwarden for most of my accounts.

I heard the username as " At Nip Dawg" hahaa

I love the whole concept of a security key, but the sites that I care about just don't support them. Lack of support by important services such as financial are the real problem. Showing us how wonderful they are doesn't seem to be moving the needle. Sad.

3:30 A one time purchase, apart from everyone recommending you buy 2 of them.

@ShannonMorse

28 күн бұрын

Buying two at once is still a one time purchase. There is no subscription fee or membership. 😊

Security say's aaaah. Everyday😂😂😂😅

9:34 that sounds like a huge pain

@ShannonMorse

25 күн бұрын

not really, if you also use a password manager they will autofill.

I like to name my keys and label them so I can tell which key might have been lost and which keys need to be added to an account. Otherwise it get's tricky fast.

@ShannonMorse

25 күн бұрын

Yup, that's what I do too! That's why the key I always show on my channel has that rainbow sticker on it.

I got two keys. I have a USB A at my home computer and I keep a USB C with my car keys (because thats when I'll be using my phone)

Wow they have been around for over a decade and doesn't come with a cover to avoid dust/damage 🤨

Definitely not ready for general public....

Snubbs, why are Yubikeys so poorly packaged with how to instructions. No mention of setting master codes that need to be shared across backup keys.

Everything you’re saying makes no sense to me bought the keys so I would feel safe and secure because I don’t trust technology. PERIOD I had three and still I can’t get into anything. It’s like they don’t know who the hell I am this really stinks and, Apple gave me a password for Apple for Google and it goes back like I don’t want 2008. I have 1000 songs on that devices and apples asking me if I have two Apple IDs I don’t they think I purchased I never knew iCloud turned into iTunes turned into Apple ID, my husband passed so nobody kept me up 2-date you can’t even respond to me because that is an old Google account from 2010 or even before then because Facebook everything I was going to just keep everything Apple and start face start everything third-party over again. Will Apple premier one that’s part of three party is really not helping people that need help, and I say that and all sincerity

Shannon, I found that you were shouting in this video whereas your other videos were a lot more mellow. I'll be honest, I didn't enjoy this video because it felt like you were talking at me and not to me. Just some feedback. Cheers.

Ubi keys are a waste of time, just above in linux on a device and use one password.