I was looking at buying one or two Yubikeys and noticed this Valentine's deal on the Yubico store.
These multi-factor authentication keys are great for securing accounts and are a good pair with password managers. Here is a list of integrated services - https://www.yubico.com/solutions/
:D Yeah must be. Or for those who forgot to get themselves something
My MtGox Yubikey got stolen last year when a thief broke in my car, it is gonna be as valuable as my coins in that exchange given time, sad
No alternative way to get back your credentials?
Not sure why I would need this.
Using Google authenticator on my phone. Free.
Yubikey is a hard token so it is inherently more secure by default. Both products are good though, it just depends on your security requirements.
Google also supports the yubikey
I've only just heard about this product, but isn't it a hard token that you plug into a device by USB? So if your laptop gets hacked, so can your Yubikey?
And they also make a version that is so small you can keep it in your device at all times? So when you laptop is stolen out of your car, so is your Yubikey?
It seems like it isn't really 'inherently' more secure, but depends how you use it, eg more secure if you ensured it was kept in a safe place separate from the devices you use it with?
Happy to be wrong, but the above is my first instinct after just finding out it exists.
I have a yubikey neo and have had one for years, I keep it on my keychain.
The main advantage of a hard token over a soft token is that it is not network connected at all. It can't be hacked unless your being physically compromised so it removes the risk of someone on the other side of the world attempting to attack you.
Even if you were to plug it into a device permanently, a hard token like the yubikey cannot be activated unless its button is pressed physically. There's simply nothing to "hack" from a software point of view.
Typically you'll use a physical token alongside a traditional password so if someone was to physically take your hard token they will still need to know your traditional password to gain access.
No one seems to have mentioned it looks like you can get a free one here https://www.ozbargain.com.au/node/361471 (don't thinks it's a v4 though)
It is a Yubikey 4. Although the Shipping is $30USD. Good if you just want one.
Also, Ars Technica are including a Yubikey 4 with their Pro++ subscription. It's $50USD a year and also includes a 20% discount code for Yubikeys (up to 5) https://arstechnica.com/store/product/subscriptions/.
I guess this is alright if you want an Ars Technica subscription anyway.
It's about time they did a refresh of the Neo (or just released a version of the YubiKey 4 with NFC). Hoping that will happen this year.
![25% off Two YubiKeys (e.g. 2×Yubikey 4 $60 USD (RRP $80USD) + $5 USD Shipping [~$82 AUD] ) @ Yubico](https://files.ozbargain.com.au/n/23/361423.jpg?h=4e91c6ad)
For next year???