Yubico YubiKeys

We currently use Yubico YubiKeys for our higher at risk users that have access to sensitive company information. For us it is an easy secure way for them to be secured and not worry about unauthorized access to sensitive data we need protected. It also assures that we reduce the risk as much as possible for risk of credential theft.

-we are now exploring the ways that YubiKeys can also be used for personal security of items and the different ways to implement the service and hardware to get the most benefit for our company and people.

• Easy to set up
• Overall great hardware
• Small form factor
• Many different options for hardware style

• Defiantly a reduction in password resets for some higher level users that we had issues with in the past
• Feeling secure in the knowledge that our data is secure with using Yubico YubiKeys
• Easy to integrate and use with our windows products

SecurID

CrowdStrike Falcon, Proofpoint Threat Intelligence Services, Rapid7 InsightIDR

So we use the YubiKey for securing most of our cloud services, like Office 365, Microsoft 365 mainly, but also other things like password managers. And as far as the services will let us, we try to use mainly the Yubikeys for the physical security tokens and trying to use them for passwordless access to avoid the risks of password theft.

• Ease of use
• Hardware security

• I'd say it's enhanced our security and it's very easy to get the users to use them. It's very, at least easy to teach them how to use them.

Google Authenticator, Microsoft Entra ID

The primary problem it solves is the non-repudiation. So knowing that the person logging in is the person who has the key and it's our employee. So the use case is things like there's none other MFAs that you rely on cell phones or QR codes that can be shared. A physical key cannot be shared.

• So risk reduction in terms of accessing very sensitive systems. For example, having root level access to AWS, that's only, we have a multi key set up on the root account and then those shared with say shared issued to a handful of constituents and geographically dispersed so that no one person is held all the keys so to say. So definitely a risk reduction in terms of accessing standard information in enterprise.
• Speed for the end user is probably most of the largest benefits. I mentioned the shortfalls is just like when someone uses one you have to go through that's like not like, good scanning code, now you have to pull back to some other solution.
• The onboarding flow of getting them out to use this depending on not necessarily Yubico's function, I know they do do some distribution, but being able to more tightly weave that into an HRS or IT system.

We're using it for MFA in the business, using it primarily with password manager, so use it to generate passwords, long and encrypted passwords, and then also to help us protect us with email. Personally, I use it from all my bank accounts.

• That's a tough question because right now we haven't had any problems since using it. Again, using with our password managers has just been pretty clean. I haven't had anybody object to using it. They all think it's cool. It could be because they're a bunch of nerds yet.

Bitwarden, LastPass for Business

Primary use case is logging in that is authentication and we use for multiple products. One is logging into the machine. The other things we use is the based off of the roles and the responsibilities. We have various apps that require additional authentication after opening the laptop, the server, and that's where we use YubiKey and it's integrated with backend, author and off.

• Many areas in the company, in the open source projects as well, we have used the YubiKey to basic authentication that work seamlessly across whether technical resources or non-technical resources. It has been wonderful for us and that's where we find is the best value for the ROI. And also it has enhanced our security and the recurring maintenance on the logging in forgetting credentials or the attacks on known passwords. So those are all the things became very less or negligible, which is a lot of saving of resources for the company.