Security Key NFC by Yubico

There are other more exquisite models of Yubikeys (eg. Yubikey 5, Yubikey FIPS) along with different sizes of each model, however this basic Yubikey (Model) Security is all most people will ever need.The "Yubikey Security" includes basic FIDO/WebAuth, for verifying your identity with many popular Internet sites when using Two Factor Authentication (2FA).The "Yubikey 5" is more so for those (likely tech savy guys) using PGP/GNUPG on a daily basis, such as signing Emails or source code commits. Includes OpenPGP (GNUPG) and SSH key support, as well as some other exquisite authentication methods. Most documentation workflows mandate destructively moving/copying the keys to your (USB) security device token (Yubikey 5), with PGP/SSH keys are primarily contained on the security device token with only stub key files remaining on the computer. If you're a user simplifying your security routine rather than complicating your security workflow, probably not wise with the existing paranoid coded tools or workflow!The "Yubikey FIPS" is likely only for actively employed Government employees requiring Federal Information Processing standards (FIPS). Certainly, as of this date July 2024, does not include civilians logging into the basic Federal Internet sites for receiving benefits; and likely will never include civilians. FIDO/WebAuth is primarily used with external security device tokens, such as Yubikey. FIPS likely requires key extraction/copying from official Government keys, and likely requires the assistance of the system's administrator... a task not for the "faint of heart", even for seasons computer programmers.YUBIKEY SECURITYPROS1) It is a larger key, unlike the nano sized USB keys, so users can visibly see their key is still attached and can remove the key when not in use.2) Basic FIDO/FIDO2/WebAuth security, can greatly simplify most Internet sites using pain in the butt Two Factor Authentication. (eg. Google, ...)3) More feasible $20-25 each, rather than greater than $50 for each for more exquisite Yubikey 5 models.4) Key is in a form factor much smaller than the credit card sized security device tokens.CONS1) If kicked, knocked or dropped, the larger keys can likely break or break USB ports.2) Most banks still do not make use of external security device tokens (eg. FIDO2, WebAuth, ...), such as the Yubikey Security USB key.3) Only one form factor, large basic and very visible. (eg. No nano sized USB keys for Yubikey Security.)

These work perfectly fine. Can be inserted into an iPhone, Mac, PC, iPad and Android phone. NFC works perfectly. Durable, but costly for what it is. The biggest problem I have is that the devices themselves make it very hard to select a physical key for authentication. The mac as an example wants to use its own vault. Its just a pita but it isn't the fault of Yubi.

Why did you pick this product vs others?:I've been working from home the past couple of years, and the company I work for recently started requiring stronger security for logging in and out of systems. I picked the Yubico Security Key (the usb version). Honestly, I'm impressed. Setup was super quick. I plugged it in, followed a few steps on my work accounts, and that was it. No extra software or anything complicated. The best part is knowing my accounts are protected even if someone somehow gets my password. You physically need this key to log in, which gives me peace of mind. Save yourself the hassle and just buy it.

I bought this so I could add a security key to my accounts that was supported by my new iPad. I did not do my research well enough as I thought this was the same as my Yubikey 5 I've purchased in the past but with a different connector on it. It does not support the 2 factor authentication slots like my previous keys as this is strictly a FIDO security key. After I received them and realized they were missing the functionality I was expecting, I saw that they were advertised exactly as they came, but I just didn't realize at the time. I should have realized because they were much cheaper than ones I've bought in the past. As a FIDO key, these work fine and I have had no issues with them.

Now I can be sure all my passkeys are in a secure place. Requires a tap and highlights the LED. Nice device!

After reading that even with 2-factor authentication [2FA] or one-time password [OTP] cyberthieves can gain access to your online accounts through a sim swap I thought I should get a physical security key. This little device stores information and generates one-time numbers for you to log in to a site, but you have to register it once, for each online account you use. A bit of online search suggested Yubikey 5 as an affordable, dependable and easy-to-use physical key. One was advised to buy two, with one as a back-up: if you lose one, you still have a second one.After the two keys arrived I tried it out. The first challenge: the key needs a USB-C port for connection to a laptop. My laptop has two USB-C ports. One is used for power, the other for the mouse receiver. So I bought a USB-C splitter. I should have checked online – I found out you can’t plug the power USB-C connection into a splitter [it does not charge], and the Yubikey is not recognized when sharing a spitter with the mouse receiver.However the biggest drawback is that mainstream financial institutions are not set up for use of a security key. One bank uses a security token [which is not the same as a security key], another only goes for two-factor authentication. Basically the only two common online sites for me were Microsoft and Google. Even that was not simple. When you plug the Yubikey into a working USB-C port, you apparently need to set up a pin but if that already exists or if you need to set up a new one is unclear. There is no ‘easy set-up’ or’ set-up for dummies’-something really simple that guides you through a Yubikey set-up even for Microsoft. The Yubikey instructions consist of a 130 page PDF filled with jargon. You apparently have to go into your computer’s Microsoft account settings to include a security key. Also did you know that for Google your pin [4 numbers] is not the same as your Google password? I locked myself out from including the Yubikey on the Google account because I could not understand what the pin was Google was asking for.In addition, I don’t think a security key solves the problem of a sim swap for the average person. Although you could use it to log into Gmail or Microsoft [provided you got that going] on your cell phone using near-field communication [NFC], people don’t usually log in to those accounts separately anyway on a cell phone. Once the phone is off the lock screen, most apps are ready to go without additional authentication. Maybe I am less smart than the average person but in the end, my two Yubikeys and the USB-C splitter will end up on the electronics trash pile.