intelliger.blogg.se - Google yubikey

Some of what a user has to do is really obscure: So, on a screen, often it’s not clear what to do to execute the next operation, and often the answer is to click on something on the screen that is tough to guess would be a link.

For me, their efforts mean that each time I connect once again I have to click and click and click to discover again how to do the basic operations While I do this, they show lots of really pretty pictures of families, houses, vacations, new cars, etc. They seem to have some graphic artists and some touchy-feely artsy types eager for some elusive emotional “user experience”. They DO have two factor authentication, they insist that it be used occasionally, it’s easy to use, and I use it.Key Bank has a very active and energetic team working and working, redesigning their Web pages all the time. Don’t let yourself get hacked to understand why.Īnd Yubikeys are a nice addition to the personal security mix.

Print out the backup codes to the two-factor services and put them in a safe place.

Use a Yubikey as a backup in case your phone is lost, stolen, or dropped in a swimming pool or toilet.

Use Google Authenticator to deliver two-factor codes onto your phone.

You can have your number ported way too easily.

Don’t use text messaging to deliver two-factor codes.

And it is almost always offered on popular services.

Always use two-factor authentication if it is offered.

So here is the best practice as I see it: My partner Albert recently experienced a similar attack. I was hacked this summer and the attacker tried (unsuccessfully thankfully) to port my phone number. It can be easier if you have the Yubikey handy.īut whatever you do, don’t use SMS for two-factor codes.

I have started using my Yubikeys instead of a Google Authenticator code. If you lose your phone, you have a Yubikey to get you back into the service.īut I don’t only use Yubikeys as “backup codes”, which I also keep stored safely. The idea is you keep one with you and one in a safe place in your office or home or a bank safe deposit box. They are a brand of “security keys” that are supported in the two factor authentication offerings at Google and many other Internet services. If I had a new year’s resolution, which I don’t, it would have been to start to use Yubikeys. Nick helped me get Yubikeys set up on all of the services I use that support them in the past few weeks. I saw my friend Chris tweet this question yesterday and had to respond: