That way there's zero chance of losing access to all 3. I use 3: one that never leaves my office, one that never leaves my home, and one that I keep with me.
I recommend a minimum of 2 one stays with you on your keychain while the other can remain at home or in your offi ce. Get a couple of keys and try to keep them in different places. Email, at least, needs to be absolutely secured, as an email compromise will allow a SIM swap which gets around SMS authentication. As an IT professional, I generally tell my clients that SMS 2FA gets you 90% of the way there TOTP (Time-based One Time Passcodes) gets you 99% of the way there and hardware keys are as close to 100% as you can get. To the best of my knowledge, there is no way around a hardware key unless the user up and bypasses it themselves. There are now inexpensive "toolkits" that allow the bad guys to set up phishing attacks that get around all forms of 2FA. So if the yubico breaks, I can use the cheapo backup until I receive the replacement yubico key.Just do it. I got this and a cheapo but we'll functioning basic key for ten bucks. Next.note you should have 2 keys for backup, but they don't have to be the same, not do you need two of these 5 series yubico. So the key I got was on a firmware from about a year ago and is missing a few profiles added to some security protocols I don't use. But they can't be updated in the field due to security issues. This key, like others you'll find for sale away from the manufacturer may have older key firmware with a bug or improperly implemented feature. It has a USB-C connector on one end, NFC built-in. Yubico, a company that drives the above standards extends those to additional protocols, a yubico authenticator app that works in conjunction with the key. The Yubikey 5C NFC is a tiny USB device, a little bigger than a coin, that you can fit onto a keychain or keep in your wallet. Fido, fido2 and u2f are pretty well covered. Other than standard two factor logins with a key. I won't explain what it does, I presume folks know it's for higher login/data access above and beyond passwords. Good key, buy them on eBay to save $ but be advised.
0 kommentar(er)
