Yubico YubiKey 5 Nano - Two Factor Authentication USB Security Key, Fits USB-A Ports - Protect Your Online Accounts with More Than a Password, FIDO Certified USB Password Key, Extra Compact Size

Protecting against any kind of hacking for personal and corporate use. Protecting Facebook, Gmail, Dropbox accounts in addition to thousands of services. Protect personal computer unauthorized login. Work natively with Windows, Mac, Linux and Chrome OS. The small factor let you insert it into USB-A and leave it.

Since I work in IT, let me just say one thing. After installing this for a few users, together with our ani-virus it has prevented phishing attacks 100%. We plan to provide this on more users. I will be listing things I like about the key and some things I dislike/recommendations in hopes that this will help you make a decision. Overall, I highly recommend this key and wish I would have gotten it sooner. Likes: - Made to stay in a laptop. (Do not loose the laptop) - It's easy to configure and really secure. - Small, discrete and easy to cary around. - Made in USA and Sweden. - If you have security concerns with Google or other companies. - it is not a google product, thus they will not have access. - It works with most sites and if configured properly can be used to sign-in to windows, mac or your network. YouTube will have several tutorials on how to do this. - Compared to RSA security keys, you get this at a bargain. - It's a consumer version so it is not overly complicated. - There are several security/authentication methods you may use. But, the simplest one is using 2FA (Two Factor Authentication). You can use this without giving your phone number or answering security questions (which we forget). Dislikes/Recommendations: - Not every site supports yubikey - There are additional software used to manage but takes a while before you can understand what these can do or how to use it properly. - Made for a laptop so it may be a bit difficult to pull it out. It's basically made to be kept in the laptop. 'Just don't loose the laptop. You need to attach a string or a keychain so you can pull it out easier from the usb slot. - From time to time you need to remove the key and re-insert it into the USB slot. There are also 2 points you need to consider. * Before purchasing the key, make sure that the site you will be using it supports this. Here is a list of sites which supports the key. The list keep growing https://www.yubico.com/works-with-yubikey/catalog/ * You need to purchase 2 keys. Same a a physical door key, if you loose one, you have a duplicate. It will be more difficult verifying your information if you loose a key without a duplicate.

Wofür ich den Key nutze * Webauthn, bei Google, Cloudflare oder Nextcloud als zweiten Faktor (leider wenig support aber es wird besser). Aktuell unterstüzen das primär Ammi Tech Firmen (github, gitlab, Namcheap …) oder vielleicht n paar Open Source Dinger. * SSH man kann mittlerweile FIDO Security Keys als SSH keys nutzen (ed25519-sk keys, sk = security key) * OATH Secrets, klassiche Zeitbasierte Login tokens wie man sie vom Handy kennt für Dienste die kein Webauth, also einfach knopf auf Security Key drücken, supporten. Angenehmer weil der Code direkt per STRG V eingefügt werden kann und etwas sicherer als dafür das Handy zu nutzen. * HMAC Challange Response kann als zusätzlicher Faktor für KeePassXC genutzt werden PIV/GPG Smartcard support nutze ich nicht (so würden sich aber auch klassiche SSH keys auf dem Key speichern lasser). Genau so wenig YubicoOTP, vielleicht wäre des ebenfalls für SSH interessant wenn man die neueren ed25519-sk keys nicht nutzen kann. Die ersten beiden Punkte müssten auch über den günstigeren blauen Security Key gehen, falls die anderen Features nicht interessieren. Der Preis ist mein einziger wirklicher Kritikpunkt, da man am besten mehrere Keys hat schon teuer, hatte überlegt den zu nehmen der nur FIDO2/u2f kann ober wollte die OATH Features. Der key ist auch nicht so einfach zu entfernen, das ist etwas fummelig, aber da er ja dafür gedacht ist im USB Port zu bleiben finde ich das nicht so schlimm (dafür hab ich n normalen Yubikey 5c). Die komplexeren Features sind denke ich etwas schwer zu verstehen, insbesondere die PIV/Smartcard features, aber an sich finde ich den Key einfach zu nutzen. Insbesondere wenn man ihn einfach als zweiten Faktor für online accounts will oder ssh -sk keys.

I need to type OTPs all over the day. Now, I have configured Yubico as my OTP provider and the whole process takes less an a second. It saved me.

It's a great little device for plugging into a desktop system especially. Sits nice and flush instead of having a big USB stick poking out of your system. Doesn't add any special functionality beyond that of other Yubikeys, just a much more convenient form factor for fixed systems. Works great, responds perfectly to touch, does what it's supposed to do.

Yubico es la máxima garantía de seguridad, es la mejor elección