A security key (like a YubiKey) is a physical USB or wireless device that you tap during login to instantly verify your identity, providing the strongest possible protection against hackers trying to access your account.
A USB Security Key is different than a USB thumb drive, although they are also inserted into a USB slot. For more technical details about how a USB Security Key works, please see the Yubikey website.
To use it for 2SV when logging in, you simply insert it into your computer and touch its button. No client software or drivers need to be installed, no batteries, no moving parts. They cost in the range of $20 to $30 USD.
To use a security key, you need to initially register this device with your identity profile.
How can I acquire a USB Security Key (Yubikey)
The process of acquiring a YubiKey will vary based on your location. If you are able to order from Amazon, that is usually the easiest and lowest cost option. When searching Amazon for “yubikey”, filter the results to the brand “Yubico”.. It is tough and resilient and can survive going through the laundry or being driven over with a car.
If you are not able to shop with Amazon, you can also try to purchase through the Yubico store or by searching for a reseller in your area.
Can a security key be used with more than one identity?
Yes. It can also be used for other systems such as Facebook, etc
How can I configure Firefox to work with my security key?
Firefox has begun supporting USB Security Keys but only after a configuration setting is turned on. To do this:
Open Firefox
Enter “about:config” in the URL field
Either scroll down to or search for “security.webauth.u2f”. (The value is probably “false”)
If the value is “false”, double-click the line which should change the value to “true”
Restart Firefox
The only USB security key that works consistently with Firefox are those from Yubikey. Others may or may not. If your device doesn’t work, you will need to use Chrome.