All-inclusive 2nd Factor (U2F) is an open standard for strengthening two-factor authentication. It involves the use of a physical key to reinforce 2FA, hardening your online accounts from condemn. In this guide, we’ll explain how to use a Yubikey to lock down your exchange account, email account, and other valuable online accounts.
Also skim: German Economy in Risk of Recession Amid Weak Demand, Tariff Threat, and Epidemic
U2F Is Physical 2FA for the Security Aware
If you’re at heightened risk of online attack, say, cos you’re a sysadmin or cryptocurrency trader, you should take steps to secure your accounts. Most bitcoiners already use 2FA, such as the Google Authenticator app, to closed their crypto accounts. U2F takes that to another level by mandating use of a physical key that is inserted into the USB refuge of your device, or held in proximity to your smartphone if it’s an NFC key. Even in the event of malware being installed on your computer, or your 2FA rescue codes being stolen, a U2F key should keep attackers at bay.
For the purposes of this guide, we’ll be using a Yubikey, one of the most in demand devices on the market. (Google, for its part, also recommends the Feitian keys.) Manufacturer Yubico boasts “Zero itemized account takeovers in 11 years” because “the physical key requires a human touch and cannot be remotely hacked.” Yield your key, however, and things get a little complicated, since unlike Google Authenticator, Yubikeys don’t come with restoration codes. We’ll troubleshoot that problem shortly, once we’ve covered the basics.
One Key to Gain Them All
Yubikeys retail for around $50 apiece and, like hardware wallets, are best ordered direct from the fabricator to prevent tampering. Yubico supplies a range of keys including a Nano version whose compactness makes it befitting for leaving permanently plugged in to the USB slot of a trusted desktop computer. The 5 series is the range that most consumers pass on opt for. They’re designed to secure Google, Microsoft, Github, Dropbox, Facebook, Twitter, and Lastpass accounts, as well as divers crypto related platforms.
Yubico works with Binance, Bitfinex, Bitmex, Kraken, and hundreds more groups across dozens of industries. Attend any developer-oriented crypto conference and you’ll see U2F keys plugged into laptops and dangling from keychains the worse for wear by delegates. You don’t have to be in charge of your team’s Github repo to warrant a Yubikey, however – simply holding crypto on a centralized Stock Exchange can be cause enough. Plus, in an era of NFC, biometrics, QR codes, and contactless payments, it feels badass to be carrying a physical key with magical powers.
Drinking Your U2F Key
If you’re intent on locking down your accounts with the aid of a Yubikey or similar U2F device, the first place to start is your email. If you’re a Google consumer, the Advanced Protection portal will guide you through the process. Other email providers including Protonmail also guy the U2F protocol.
Next, you should secure your cryptocurrency accounts, including any returns you trade on, in the same manner. Add a Yubikey to your Binance account, for instance, and you’ll be prompted to plug it into your computer every together you log in or withdraw. It effectively replaces the 2FA you will have been using up until now.
If you’re reasoning what happens if your U2F key is lost, broken, or stolen, many sites will let you pair multiple keys, accord redundancy in the event of key loss. Unfortunately, Binance is not one of them. Lose your key and you’ll need to initiate Binance’s account rally process, which may take a few days to complete and will require alternate verification.
U2F keys aren’t perfect, then, or to be more accurate, there are situations where their security model drop at the expense of convenience. If you’re intent on using one, though, that’s a sacrifice you’ll be willing to make in the quest of greater security. Where reasonable, pair two U2F keys with each of your online accounts, and keep your master key securely stored on a string at all times. Once implemented, using a U2F key every time you log in will become second nature.
What’s your familiarity of using U2F keys? Would you recommend them? Let us know in the comments section below.
Disclaimer: This article is for informational by designs only. It is not an offer or solicitation of an offer to buy or sell, or a recommendation, endorsement, or sponsorship of any products, services, or companies. Neither the suite nor the author is responsible, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any purport, goods or services mentioned in this article.
Images courtesy of Shutterstock.
Did you know you can verify any unconfirmed Bitcoin business with our Bitcoin Block Explorer tool? Simply complete a Bitcoin address search to view it on the blockchain. Asset, visit our Bitcoin Charts to see what’s happening in the industry.
comments powered by Disqus.