What is YubiKey? Advantages & limitations of YubiKey
Description of What is YubiKey? Advantages & limitations of YubiKey
What is Yubikey? Should I use Yubikey? How does this key work? Let's answer these questions in today's article.
Security is always one of the top priority factors in the crypto market, learn how to improve security with a special accessory: Yubikey.
Core knowledge:
- YubiKey is a physical security key used to perform 2-factor authentication
- YubiKey brings convenience to users
- YubiKey can be used with most apps that support two-factor authentication
What is YubiKey?
Yubikey is a type of security key provided by Yubico company. This is the most popular type of physical security key on the market, often used for two-factor authentication (2FA) and passwordless verification, making it more convenient for users to log in to their accounts while still ensuring the security of their accounts. guarantee confidentiality.
Normally, if a user wants to log in to an account, he will only need to enter his account and password. However, to ensure account security, many applications will require an additional verification code or temporary password from 3rd parties such as Google Authenticator, Authy... YubiKey is such a solution but in the form of a part hard.
How YubiKey works
After successfully logging into applications, not only crypto exchanges like Binance, Kucoin, FTX… or even services of Google, Facebook, Lastpass, Dropbox… Users can link, add Yubikey to your account's authentication method.
For the following logins, users only need to enter the correct account and password, the browser will ask you to plug the security key into the computer and press the button, then the authentication step will be automatically performed between YubiKey and browser, the user will immediately log in successfully.
Advantages & limitations of YubiKey
YubiKey is a security key that can both help users have more choices in using 2FA security methods and help users enhance account security.
In addition, using YubiKey has the following advantages:
- Help users save time, instead of opening the phone, waiting for the OTP code or having to go to other applications, just a push of a button.
- In case the user does not have a personal phone, or the phone is damaged, loses signal, or runs out of battery. YubiKey will be the only solution to help users log in to their accounts.
- Sometimes users can't access secure authentication applications or do not receive OTP codes, codes arrive late, YubiKey will help solve this problem.
- There are foreign applications or software that do not support sending and receiving OTP messages or also encountering the case that the code is sent slowly, YubiKey also helps users to be more optimal.
- Using a 2FA security application like Google Authenticator will have to add quite complicated operations to store the QR code, even if you lose your phone without saving or exporting your account to another device, it will cause users a lot of problems. trouble. Yubikey can solve this problem.
- In addition, when using the above applications, it also makes users sometimes spend time in finding the code corresponding to the account they are logged in to, even under pressure to count down the time. With YubiKey, all it takes is one touch.
In addition to the above advantages, YubiKey also has a few minus points:
- Because it is a type of physical key, to use it, users will need to pay to buy it. The price of the product is not too expensive, but because it is shipped from abroad, it will be more complicated.
- For each type of device will need the corresponding key, for example, those using a new Macbook will usually only have a Type-C port, users will have to buy the correct Type-C YubiKey, the price will be a bit higher.
Instructions for setting up YubiKey on Binance
YubiKey or security key has many applications from Facebook to Google, Github, Microsoft… This article will take an example with a famous crypto application - Binance exchange .
Step 1: Log in to your Binance account, then select Account → Security.
Step 2: Then at Two-Factor Authentication (2FA ) select Enable .
Step 4: Read the notice carefully, then if you agree, select Continue . A few notes from Binance:
- Secure key connection only applies to www.binance.com .
- When security key authentication is enabled. You can only authenticate the withdrawal request via the security key
- Binance only supports security keys on the web version. The security key cannot be used to sign in with the Binance app on both PC and phone. This means users will not be able to make withdrawals via mobile phones.
Step 4: In the next step, you need to use YubiKey. Plug the YubiKey into the USB port to activate, after the light is on, press and hold the button on the Yubikey body for 60 seconds.
Step 5: Select Allow if you receive the message below.
Users can also name their YubiKey (optional). Then click Verify your account.
For Binance accounts with Google Authentication enabled, users will be asked to enter this code.
Step 6: Access your email to verify YubiKey setup request. After confirmation, the account will be secured by YubiKey. If you do not receive the email, please check:
- The email address provided is correct.
- Check your spam and spam mailboxes.
- Make sure email functions are still working properly.
A few notes when using YubiKey
Where can YubiKey be used?
YubiKey has many uses, not just crypto. In general, YubiKey can be used to bind 2FA for most applications that support two-factor authentication.
Can an account use multiple keys?
Users can add multiple keys for an account. With a Binance account, users can manage up to 5 security keys at the same time.
What to do if you lose your YubiKey?
If you lose your security key, don't worry too much. With popular accounts like Facebook, Google... users will always be prompted to choose other forms of authentication. It could be a text message, an email.
Another solution is to use a backup security key. As noted above, most accounts allow users to add more than 1 security key. If 1 of them is lost, the remaining backup keys can still be used.
Where to buy Yubikey?
For security-related products, always buy genuine products. For the most convenience, you can visit the official Yubico store in Vietnam to order products.
You can also go to other genuine overseas websites, Amazon to order. However, this method will cost more money and time.
summary
YubiKey is a very handy device and can be used to enhance account security. If you intend to use it, be sure to find out which model is right for your computer/laptop. To be extra sure, buy a few as a backup.
👇
