How to Choose the BEST 2FA Key for Security (Yubikey)

Summary

In this informative video, Josh from All Things Secured guides viewers on selecting the right Yubikey for their 2FA needs. He breaks down the decision into three key questions, addressing the necessity for secure one-time passcodes, extended authentication support, and the ideal form factor for various devices. Josh clarifies that while the 5 series offers advanced features like passcode storage and OpenPGP, the Security Key series is a cost-effective choice for individuals. He also highlights the importance of choosing the right plug type, such as USB-A, USB-C, or NFC, for convenience across multiple devices. The video aims to demystify the selection process and help users invest wisely in their online security.

Takeaways

• 🔐 Yubikey is a top choice for security keys, offering various options to suit different needs.
• 🛡️ The Security Key series is the entry-level option, suitable for basic 2FA needs.
• 🗝️ The 5 Series and 5 FIPS Series are more advanced, offering the ability to store one-time passcodes and extended authentication support.
• 👍 The Yubikey 5 Series has its own authenticator app, allowing for secure one-time passcode storage and use.
• 🚫 Some companies still do not support 2FA hardware keys, making the 5 Series particularly useful for those needing compatibility with authenticator apps.
• 👤 The Bio Series introduces fingerprint authentication, adding an extra layer of security for those who require it.
• 💼 The Bio, 5 Series, and 5 FIPS Series are geared towards business use due to their advanced features.
• 📱 Consider where and how you will use your security key, as this will influence whether you need USB-A, USB-C, or NFC capabilities.
• 🔌 The Bio Series does not offer an NFC version, which may be a limitation for those wanting mobile device compatibility.
• 📲 The 5Ci model provides a lightning plug for Apple devices, but it's more expensive and may not be as convenient as using an NFC key.
• 🔄 The nano versions of the 5 Series are designed to stay plugged into computers, but this may not be the best security practice.

Q & A

What is the primary purpose of the video?

The primary purpose of the video is to help viewers choose the right Yubikey 2FA security key for their specific needs.

What are the different Yubikey series mentioned in the video?

The different Yubikey series mentioned are the Security Key Series, the Bio Series, the 5 Series, and the 5 FIPS Series.

Which Yubikey series can store one-time passcodes?

The Yubikey 5 and 5 FIPS series can store one-time passcodes.

Why might someone choose the Yubikey 5 series over the Security Key series?

Someone might choose the Yubikey 5 series if they need to create secure one-time passcodes or require advanced features like OpenPGP for email.

What is NFC and why is it relevant for Yubikey users?

NFC stands for Near Field Communication. It allows users to tap their Yubikey on a mobile device for authentication instead of plugging it in, which is convenient for modern mobile devices.

Which Yubikey series does not offer an NFC version?

The Bio series does not offer an NFC version.

What advantage does the Yubikey Bio series offer?

The Yubikey Bio series offers fingerprint authentication, adding an extra layer of security by ensuring that only the owner can use the key.

Why might the nano versions of the Yubikey 5 series not be ideal for all users?

The nano versions are designed to stay plugged into a computer at all times, which could be a security risk if the computer is stolen.

What are the different plug types available for Yubikeys and why are they important?

Yubikeys come with USB-A and USB-C plugs, which are important to match the ports on your devices. The 5Ci also offers a lightning plug for Apple devices, but NFC might be a more convenient option.

What does the video suggest about using Google Authenticator with Yubikey?

The video suggests that while you can use Google Authenticator, the Yubikey 5 series offers its own authenticator app that can store one-time passcodes, providing an alternative if you have privacy concerns with Google.