Everyone everywhere needs to email and call your bank and ask for hardware key support. This honestly needs to be covered on news stations until it gets addressed. It's pretty ridiculous that any bank wouldn't have support for this by now. They've literally had YEARS to implement this. It's almost like they want to leave us vulnerable like human honeypots.

@LionRoars918

Жыл бұрын

Like a 8-12 digit numeric only password (they state it on the website it must be 8-12 and numeric. That gives hackers a huge heads up) on a bank with NO 2FA option. That is just crazy.

@Tjensen999

Жыл бұрын

I tried, but they ignored my request. 😭

@BrianGlaze

Жыл бұрын

It's time to send emails to regulators and local policy makers. If enough people do it, it will get the ball rolling.

@Darkk6969

Жыл бұрын

I think the problem they don't want to spend the money to add this feature. It's going to take some regulation to enforce it. I too would love to see my bank have this feature. Bofa don't even offer Google Auth for better security!

@mikebuck4841

Жыл бұрын

Banks have zero interest in their customers. They ONLY care about $$$. Look at the predatory fee practices of most banks. It will take gov. Regulation to force them to actually protect our security and privacy.

Hi Shanon thanks for all the ongoing advice you give users for securing their systems.

Awesome, I was just looking in to this and watching your other videos on yubikey yesterday.

Thank you for all the videos about Yubikey. They are very concise and informative. I just used your code on three new keys.

Love these videos. Constant reminder that I have a new level of security I need to aim for.

SOLID video! Thanks greatly for speaking about owning a space key - I mean, it totally makes sense, yet, this is the fist time I've heard anyone mentioning it. I am sold on it - thanks greatly for the video! 🇺🇸

Morning Shannon! Always appreciate the vids

Looking forward to securing "all of the things" with a hardware token...well, at least everything that supports it. Thank you so much for the info. I'm sharing this with my friends and family.

This is the clearest explanation I've seen on how to choose the correct yubikey. I just bought 2 security keys and saved 10 bucks thanks to this great offer. Thank you, Shannon!

Thanks for another fantastic video Shannon!

@ShannonMorse

Жыл бұрын

Thanks for watching!

Thank you, Shannon

The fact that NONE of the Big 4 banks have hardware key support is striking. (The "Big 4" for those who haven't heard the term are Wells Fargo, Chase, Citi, and Bank of America. ETA: Bank of America does support it, and Wells Fargo and Chase support RSA's SecurID token.) But not surprising either since banks generally don't make any significant changes - such as implementing hardware key support - unless law or regulation forces their hand. And if you think the financial sector is slow to change, the government is even slower still. And in the United States, the regulatory process is governed by law, and mandating hardware key support across the entire financial sector - something that absolutely should be done - will likely require statutory authorization from Congress. So I would not expect banks to implement hardware key support unless Congress and the President implement a statute mandating it.

Nice one Shannon 🙂

Love your content and this video got me to take the plunge with Yubikeys. Out of curiosity, would you ever do any content about security-focused email providers? Thanks!!

Love your channel and the teaching you do. I've used the yubikey for years but have struggled with USB port permissions on Linux and Lineageos preventing the key from being 'seen' or detected. Similar issues now with browsers on Linux in flatpaks, again probably a permissions issue but in general Yubikey is clearly a huge security upgrade.

2? i have 3 after looking at your video's regarding 2fa and Yubikeys. Verry nice explanations and all!!! Thanks a bunch!!!

My entire family has Security Keys on our keychains, then the 5 series permanently inserted on our desktops for convenience and for the Yubico authenticator. Thanks for the code btw. I was able to use it,

Thanks Shannon, very helpful.

@markallen8226

4 ай бұрын

Thanks. Do I buy from yubikey directly, or Amazon? And do I need two? Thanks so much.

Thanks for this series on hardware keys.

@ShannonMorse

3 ай бұрын

Glad you like them!

I would love a step by step of what to do when you receive your key, setting up with Yubico authenticator and BitWarden or other password manager.

Thanks!

It would be interesting with a walk through on what the differences are between the Security series and Yubikey 5. It would also be interesting to know how to manage these in an enterprise environment.

@rexjuggler19

Жыл бұрын

If you have the newer firmware Yubikey 5 NFC, it is possible to administer from an Enterprise remotely for resets and stuff. Prior to that, your company would have to send you a programmed key. My company has used them for over 10 years when they replaced digipass. We use them for VPN access. I was in Europe about 5 years ago and had left my Yubikey at home and was stuck without VPN access. However, we had an office in Germany about an hour and half from where I was working and so I made arrangements to go to our IT department there and get a replacement key. I love Yubikeys. I have personally bought over $500 worth of them - it doesn't take many of them to reach that amount. But the things are basically indestructible. You should never look at the price of just one. You MUST buy at least two. A good scenario you might implement at a personal level is to buy 3-4. You have a primary, and backup, and then your spouse or close family also. The only thing you have to make sure of is that you have a process that you are willing to follow to activate all your keys when you setup an account. Don't be lax about it. Have your primary key and backups available when you do your setup. Probably the most confusing part of a Yubikey is that it indeed supports several multifactor standards. SmartCard PIV, FIDO2, TOTP, etc. I prefer the FIDO2 and PIV, but use the TOTP most because it is more widely supported. Nice thing about it is you don't have it tied to your phone. It is tied to your key. So you just install the yubikey authenticator app on your phone, PC, whatever. If you lose your phone, you can easily put the app on a new phone or friend's phone and use your key against it and you are back in business immediately. Extremely secure, extremely resilient.

Thank you

Hi Shannon, big fan of your content for many years. I just got Yubikeys and now feel great about my security setup - however I did run into issues with re-auth on my Google Nest Hub, KZread account on my TV etc. which I have not fully resolved yet. It seems like not all devices support advanced protection. So I wonder if you could address some of the potential negatives as well, or better, common fixes for these. :) Cheers from Denmark.

please make one video about setting up yubikey manager ( not many in KZread tho ) i mean there are some just showing how it is thats it , no one is showing setting up yubikey manager in a deeper level , it will be nice if you make one . thank you

I bought one after watching you on Think media podcast

I got 2 thinking I would use 1 as a backup, but I ended up keeping 1 plugged into my desktop (usb-a) and using 1 for my mobile devices (usb-c). I might get a third to use as a backup for both.

Thanks

I have multiple yubikeys. iPhone/usb c and usb a/nfc that I use for Fido2 and 2fa. I also have one at each computer for login so you have to have the key+pin. Cloudflare/yubikey ran a special at $10 each for up to 5 keys. I bought 5 just to have spares and spread the word like I’m a Mormon on a mission

Haven't watched it yet but the title caught my eye. I understand WebAuthn is the new hotness over FIDO2, but that capability is more expensive than a run of the mill FIDO2, i.e., Series 5 vs Security Key.

It could be really interesting to have a video going into details about Passkeys vs Hardware Security Keys

Thank you for the videos on this topic. If you do create any site-specific setup tutorials, please consider also covering what 2fa methods to *disable* after hardware keys are setup. Having a hardware key configured is great, but if the "choose another way to authenticate" option leaves in place a less secure method, such as SMS, then the overall security posture remains weak to that degree. Like you mentioned, the alternate non-hardware paths, such as email password recovery, should also have the hardware key as a requirement. Don't put a big padlock on the front gate and leave the side gate locked with a zip tie.

@charleshines2142

Жыл бұрын

The only bad thing about SMS is that sometimes people are a victim of a SIM swap. If you ever lose service and are in a place with good reception look to see if it is getting a signal because if it is and you can't call out that can be bad!! Get in the car right away and go to your carrier (with all needed forms of ID) to get the situation resolved.

Hi Shannon, great video and very useful information as well….as usually 😁 Let me ask you something, maybe you can explain it so everyone here gets even more useful info. I have two Yubikey 5C (USB- C and NFC) already set up for several accounts. When I purchase another Yubikey, for example the one with fingerprint sensor, is there a chance to synchronise it with the two other ones? Or do I have to set it up with all accounts and Services step by step? I hope my question is understandable unless my mother tongue isn’t English☺️ Thank you and take care Shannon🤗

Hi Shannon - love your videos! Thinking about buying one for me and my partner. We both use gmail. Could each of our individual keys work as the “backup” key for the other person? Or would I need to buy 4 keys for the two of us?

Sat and waited for your coupon. Missed last month's. The funny thing is that it is much cheaper to buy from their website than to order from a store here in Sweden. Thank you Shannon! Is the link also an Affiliate link so you can earn a little from Yubico?

Can you create a video comparing the built-in security key on newer Android phones with a stand-alone hardware key? I haven't found anyone who has done that yet. Obviously, using your phone is cheaper, but worse if you lose it. Maybe the best low-cost option is to use both your phone AND one hardware key? Would love to hear your thoughts. Just found your channel and am really enjoying all the great info you provide!!! Thanks!

Great content and please keep supporting hardware 2FA (maybe do a how-to collab with LTT? Too soon? Ouch.)! Minus a lot of details, I was told by a friend in that sector that the reason why many banks haven't started supporting HW 2FA is because once the customer has fully migrated, they (the institution/bank) can no longer remotely support (i.e. reset) your lost password or provide the key needed to complete the logon process (or recover your keys if you lose them). I know the few banks that do allow HW 2FA "require" that you activate/enable two separate physical keys OR leave a digital 2FA authenticator enabled. Baby steps but we're getting there!

@BrianGlaze

Жыл бұрын

Honestly that collab would be perfect at this time

@Darkk6969

Жыл бұрын

Well, they could update their app to include 2FA support so it's controlled by the bank.

@jjann54321

Жыл бұрын

@@Darkk6969 You're kidding right...?

can you do a video about this subject for macbook users, im lost and i need to secure a macbook air, i ended up buying the wrong key on accident ty

Can you have multiple backup keys? Like one stored at home and one in a safety deposit box.

My bank has a system of login and payment authorisation that requires me to type in and generate random codes from a sort of mini-calculator security card. How do you feel this compares to the key plus 2fa systems? Is this in fact as secure as a yubico or similar key? Thanks for an excellent video, the whole series is very helpful.

3:41 the reason banks do not use these keys is because your bank card is the key. With my brother bank, I could use my brother’s debit card walk right in and take money out or put money in with no problem, My own bank does the same thing and we have two separate banks so i’m assuming this is the case with all banks. I did have Wells Fargo and you do have to have your pen and debit card in order to do anything with your account in person.

Yeah someone just try to make an Apple ID on one of my old emails. Got the email change my password which was an old one and setup with my hardware key it comes so clutch

Great video. Can I use a YubiyKey on my google Pixel7?

I would prefer the nano for a laptop since a big dongle hanging out of the side will eventually get knocked around. Then that USB socket is no longer reliable because it is loose or broken. Have you noticed that when you plug things into a USB port they can become loose each time or over time? That is why on my desktop I have an extension USB cable coming from a back port. It will take all the wear and tear and the socket on the computer will still hold. Then if that cable ever wears out (it never did yet) I can just replace the cable. You make have noticed on new computers and laptops the USB sockets are still tight. That may annoy some people but that just means they are still reliable. I would go with NFC for my phones. I have a Motorola Edge that may be compatible. I am just not 100% positive of compatibility since I have not gotten it to send a file by NFC to my Sony Xperia (similar to Samsung, many Sony phones have NFC).

Also cover how easily the USB connector snaps off and how screwed you will be.

I have dipped my toe in the passkey game, and now I find that it may be useful to have a security key as well. My question to you is, can you use the less expensive Yubico Security Key for hardware passkeys, or do you need the regular Yubikeys for that? Mostly, I see the keys as a convenient way to move passkey access to another device, without having to go back to the old username/password method, or burn through one-time-use codes.

yes setting them up. i have a laptop with type C usb but my other desktop has usb A. i have a dongle that converts the USB type C to a USB type A on my laptop. Will the Yubi key work with the dongle? Also the keys also work wireless as well correct? Thanks

Hey I’m almost done watching the video. What happens if my key gets stolen?

yubico 5nfc: if I set it up on my iPhone, what happens in the case of an emergency? For example, under the normal iPhone security you can set up numbers that can be called even if the phone is locked. In addition to that if you have medical info stored in the health app it to is available. So, say you are unconscious paramedics could still see that info and call people set up as ICE contacts. Will that still work?

The problem with these on iPhone, as I’ve found out recently to my cost, is that even though keys from some retailers might use NFC, they don’t work wit iPhones because… reasons. The link that Apple give to check compatibility is confusing and not user friendly at all. You need 2 keys for iPhone anyway and you’re best of buying 2 Yubikeys, which I can’t help thinking is deliberate.

Question - with the new Pass Keys are we going to need 2FA?

Are those blue blocking glasses? Do you notice a difference?

Does the code work in the uk ?

Video Request I've wanted to to a YubiKey for a long time now but every time I'm about to do it there is one thing that stops me. Suppose I die before my wife, she would be locked out of everything. I'm the nerd in the family and she is the free spirit. She loves books more than the Internet. Could you do a video about how to prepare your non-techy spouse to access your protected accounts in an emergency? I've forced her to use the same password manager I use use for the same reason. This took years and she still uncomfortable with it. Thanks for all you do.

Will Yubikey work with the Apple mail or Outlook apps?

How to disable the USB ports in Windows 10 while allowing the YubiKey to function? Sorry for the newbie question

my Laptop and Computer stay most times in my home, but I want to use the key for aps too (NFC). Can I still use a small USB only Backup key and a main NFC -keychain- Key? I mean is there a way to unlook NFC apps with an USB A key, in case I loose my main KeY? Or do i need 2 NFC Keys?

Hello, what is the operating system of your ubiquiti Unifi console? Mine, on work is arch Linux I want to know if it's different. Thanks.

Is there any hardware key that can be constantly plugged into my desktop, without the need to touch the key itself, to confirm?

Hey Shannon, what would you recommend for someone with multiple home PC's, laptops that travel, iPhones, and iPads? Do you need 1 key per member of the house?

@tylerscott838

Жыл бұрын

Can we use YubiKey on managed work phones and computers as well?

There is a super good answer. Way better than 2FA. It called going offline. I use an internet killswitch. No hacker can get into something that isn't there.

@estusflask982

Жыл бұрын

Are you joking...your accounts are online no matter if you have internet or not

Why do banks not use the Yubikeys? I don't see my bank or any credit cards I have gine me options for Yubikeys. Can you comment on this?

What happens with yubikey FIPS vs regular yubikey 5

Is it possible to use a Yubie key without any password manager on sites that have 2FA options or maybe any site? I am trying to avoid a password manager.

SO, can you use a USB-A key, in a device with a USB-C port, using a standard "A" to "C" adaptor?

Shannon can you do an episode explaining "passkeys" please?!!!!!!!!!!!!!!!!!!!!!!!!!!!

Hi thank you for your videos! were can I find an adaptor for a yubi key usb c to lighting to fit my I pad pro? so I don't have to buy 2 more Yubi keys to fit my iPad pro, Thank you.

@nicholaslafferty3928

Жыл бұрын

Amazon ebay etc

@SteveEarly-jn6kp

Жыл бұрын

@@nicholaslafferty3928 thanks the adaptor has got to be a Special kind to work with kubi keys per the Kubikey web sight, I thought Shannon might know what kind to buy.

Weird it says your coupon code doesn’t work maybe it takes effect in April?

Can I set up a Windows 7 laptop with a hardware key so everytime I login to my laptop I would have to use the hardware key?

I have a question! Can one key work for multiple accounts? If so, does the key repeat the same data for each account or will it generate other ones?

@ShannonMorse

7 ай бұрын

Yes, it works across your accounts! And no, each authentication is going to be a different key pair, so the data is not the same for each account.

The code isn't working, at least, not for the Series 5 NFC FIPS version. Might want to get some clarification on where the code should be working. I'm not overly concerned with it, and have been delaying getting one for a while now, but after what happened to Linus the other day, I figured I would pull the trigger on purchasing a pair today.

Is it possible to use the yubikey 5c nfc and plug it in to a android phone usb c port, toggle the touch function to use it or is it only NFC connection that I can use on the phone?

@ShannonMorse

Жыл бұрын

Yes, you can use it via USB c instead of NFC.

I bought two Yubikey Bio devices and am finding that I never use them. The number of web sites that are supported is limited. Google has embraced Yubikey but they are the exception. I use KeePass for passwords. There's a way to use a Yubikey to open a KeePass database but the Bio isn't supported. I discovered this only later. I chose the bio because it appeared to be more secure. I paid a lot for these. Should I return them or should I be patient.

@ShannonMorse

Жыл бұрын

I'm this video, I went over the protocols and this is exactly why - sometimes keys like the Bio are made for very specific use cases and don't really work for more consumer-based services and websites. I usually recommend getting a series 5 key over the Bio.

"can i use a 5 series on my windows 10 desktop to authenticate on a site which only accepts otp, and not hardware keys, without a phone necessary for scanning qr codes?"

Why the downer on Lastpass? They were hacked a year ago but I thought they had tightened up. If someone is a lastpass user, can they export all the credentials to a new password vault or would they need to be copied 1 at a time?

@robdodd4591

Жыл бұрын

Ahh sorry - I jus looked up your video showing how to do the above!! Sorry ! and thankyou haha!

Dose the cheapest one work with instagram

i am glad i watched this video, i did add a few dfifferent hardware keys of Yubikey but some of them are for mobile devices and i could care less how vulnerable a smartphone is. i am focused on laptops and computer tower hardware keys.

Hi Shannon: Have a question for you, I bought (2) Yubikey NFC 5 series after watching your videos. I did the set up process on my Macbook Pro and iPhone. But I could still sign in using my laptop password only, Yubikey will only prompt me to enter my Yubikey code when the key is inserted in the USB-C. Am I supposed to disable my laptop sign in? Same with my iPhone, I can still sign in with my phone passcode or face ID. It's not asking for the Yubikey. Did you do a tutorial for this? Kindly advise....Thanks much!

@estusflask982

Жыл бұрын

I think the Apple implementation is mainly for your Apple ID/iCloud account, not your local user accounts on your laptop and phone. But I may be wrong

@QueenJNice1

Жыл бұрын

@@estusflask982 The Apple iCloud Keychain seems to be overriding my 1Password and Yubikey. Looks like i need to disable the Apple iCloud Keychain for 1Password and Yubikey to function properly?

Love my series 5. However honestly I am finding that there is A LOT of work to do. Banks .. UGH. Like a 8-12 digit numeric password ONLY. I will not mention the name.

3:39 I withdrew 70% of my portfolio from one investment firm, since their 2-FA is so shi**y. They weren't happy, but I told them as soon as they wake up and get with the program, I'll gladly transfer it back.

Would it work on LinkedIn?

I have 2 Titan Secure Keys from Google

ALOHA SHANNON! I JUST ORDERED MY YUBIKEY FROM YOUR LINK AND I GOT MY $5 OFF EACH YUBIKEY! MAHALO!!!!

Confused, I buy a key, is there a monthly cost after I buy the key?

@estusflask982

Жыл бұрын

No. One-time purchase. No subscription, just better security.

@buzzsah

Жыл бұрын

@@estusflask982 Thanks for the info.

@portman8909

4 ай бұрын

Only monthly if it’s for enterprise

8:43 code not available in germany :-(

I just enabled hardware 2FA with Bank of America. I think they started mid-late 2022. Wells Fargo still does RSA key...which of course only works with their service. 😡😤🤬

Dumb question - Can I buy two, then my wife uses one and I the other. Then we each use the other person’s as a backup?

@ShannonMorse

3 ай бұрын

Yes 🙌

Which ones are 25 cause the ones I saw were 50 a pop

there is nothing wrong with bank not using the hardware keys... you shouldnt have your money at those scoundrals!!! xD thanks for vid

Frankly, I do not like one company dominating keys, so I would prefer see more, and promoted more (if quality is there) diversity of providers. This way video kind of looks like yubikey promo material.

@ShannonMorse

Жыл бұрын

I mention in the video that you should be buying from a company that is a part of the fido alliance and I've also done videos reviewing other brands. I'm partnering with yubikey on a series because I've been buying their keys for almost a decade out of my own pocket and they have the best options. If you have trust issues, there are plenty of white papers and documentation linked via their site and via the fido alliance covering protocols, security and more. I would recommend spending some time on those sites and reading their publicly available resources.

@davorinrusevljan6440

Жыл бұрын

@@ShannonMorse frankly I am more interested in price, features, what can be used on which services, and head to head comparisons of the products. Your coverage of the keys is very useful, but I think it is time to move from "buy from the reputable source", which more or less translates to buy yubikey no matter the product or price. I will buy it from yubikey, if it has best price among products that work just as well. And it would be very nice to see a fair comparison.

The problem is that all these hardware keys have. A battery? In them. And once the battery drops dead what happens to the key? What happens you're security? It goes bingo and you can't access your account. That is what happens because all of these keys have a battery in them. You're not without a battery they have a battery in them. And once the battery drops ned well guess what you might get locked out of your account. Tell just beware you might have to replace them before the battery life is over. So I'm just letting everybody know that you might have replaced these keys before the battery is finished. These things have a battery with them remember that?

@ShannonMorse

4 ай бұрын

This is false. The YubiKey has no battery but features a built-in clock that uses the power from the USB port or NFC (in supported models). This clock can be used to measure the time between two OTPs, verifying user presence so that pre-recorded OTPs cannot be used.

if companies want customers to use 2fa then i think one of the options should be a hardware yubikey key, but let the companies pay for them and pay to have them shipped out to each and every customer.

@ShannonMorse

Жыл бұрын

But you only need one hardware key for all your online accounts (a second for backup) so if a company did that, you'd end up with like 25 unused keys just laying around. This seems like a wasted cost and isn't environmentally friendly.

@rayn1ful

Жыл бұрын

@@ShannonMorse why do companies seem to assume everyone has a cell phone and therefore try to get everyone to use a cell phone for 2fa?

Nothing wrong with iPhone. In fact, Apple's 2FA is slightly better than Google's. I hate the fact that google forces the default use of their apps instead of just allowing physical keys. If you want to force just using a physical key on google you have to uninstall all Google apps from your mobile device. I searched for this over and over all an answers say if you want physical only you have to uninstall the apps. This is just rediculous

@nicholaslafferty3928

Жыл бұрын

Not to kick up dust or anything, but its not the 2fa that is wrong with apple but that there is a false confidence in their respect for privacy and how they instead centralize users data and sell it all the same. That's all I know and offer the service of providing that info but not the service of answering follow up questions.

Banks be dummin

Don't get hacked like Linus Tech Tips did

@LionRoars918

Жыл бұрын

Shows you that Google in particular needs to up their game.

@estusflask982

Жыл бұрын

Yubikeys don't help if you get hacked like Linus did.

@An.Individual

Жыл бұрын

@@estusflask982 I know that. He had lax op sec which he admits. Yubikey helps get you in the right mindset.

Why would anyone trust GOOGLE?

What breaks me is that Wells Fargo is a fido company but I can't use my yubico key on my back account, my only option is SMS or email....