[Hands On]Yubikey - Help secure your digital assets - Including Blockchain.info

[xqus]

Can I ask? Is this "Yubikey" a souped up version of Ledger's HW.1? It works with more than just a few bitcoin wallets, has NFC support, and looks less flimsy?

No. Yubikey is a one time password generator. It has nothing to do with bitcoin, other than some online wallets lets you use it to protect your account, like they also lets you use Google Authenticator, or one time passwords delivered by SMS.

[xqus]

..snip...
I think Lastpass is pretty good.  There was one exploit for Lastpass they named Lostpass you just need to make sure your signing into your Lastpass and not a phishing site.  Which you really should always check that when logging into a password manger.  And having two factor with Yubikey does help on most possible security problems tremendously.

Just to make sure you know what I was talking about I don't think LastPass is a bad choice, but it's always good to know:

https://nakedsecurity.sophos.com/2015/06/16/bad-news-lastpass-breached-good-news-you-should-be-ok/
https://paul.reviews/privacy-password-managers-a-reality-check/
https://forums.lastpass.com/viewtopic.php?f=12&t=187485

[notlist3d]

..snip...
I think Lastpass is pretty good.  There was one exploit for Lastpass they named Lostpass you just need to make sure your signing into your Lastpass and not a phishing site.  Which you really should always check that when logging into a password manger.  And having two factor with Yubikey does help on most possible security problems tremendously.

Just to make sure you know what I was talking about I don't think LastPass is a bad choice, but it's always good to know:

https://nakedsecurity.sophos.com/2015/06/16/bad-news-lastpass-breached-good-news-you-should-be-ok/
https://paul.reviews/privacy-password-managers-a-reality-check/
https://forums.lastpass.com/viewtopic.php?f=12&t=187485

I'm not debating your knowlege, it is true what your saying.   Also people should realize I picked Lastpass as I liked it.  There are many different password managers you can pick your favorite.

And even if say your master password is stolen the great thing with Yubikey attached, is without it they can't even access your stored info.  So that second factor authentication is important.

[notlist3d]

Can I ask? Is this "Yubikey" a souped up version of Ledger's HW.1? It works with more than just a few bitcoin wallets, has NFC support, and looks less flimsy?

No. Yubikey is a one time password generator. It has nothing to do with bitcoin, other than some online wallets lets you use it to protect your account, like they also lets you use Google Authenticator, or one time passwords delivered by SMS.

And I should be clear I'm  not telling people not to get hardware wallets, I'm a strong supporter of them.    They are a great option to use.

I am doing this thread as I think password security for a lot could be greatly secured with Yubikey and software, or 2nd factor log-ins.  Also blockchain is the number one mentioned hotwallet online, and I think Yubikey is great to use as 2nd factor.  So even if your blockchain password is taken they could not log in without your Yubikey.

[Decoded]

So... A yubikey is a physical second factor? This is actually quite a cool idea. How did you push out your product so widely? I haven't heard of it at all, but it's widely supported.

[xqus]

Can I ask? Is this "Yubikey" a souped up version of Ledger's HW.1? It works with more than just a few bitcoin wallets, has NFC support, and looks less flimsy?

No. Yubikey is a one time password generator. It has nothing to do with bitcoin, other than some online wallets lets you use it to protect your account, like they also lets you use Google Authenticator, or one time passwords delivered by SMS.

And I should be clear I'm  not telling people not to get hardware wallets, I'm a strong supporter of them.    They are a great option to use.

I am doing this thread as I think password security for a lot could be greatly secured with Yubikey and software, or 2nd factor log-ins.  Also blockchain is the number one mentioned hotwallet online, and I think Yubikey is great to use as 2nd factor.  So even if your blockchain password is taken they could not log in without your Yubikey.

I agree. Hardware wallets are great. And IMHO the best choice for any bigger amount of bitcoins.
As long as you use an online wallet, you should protect them with 2FA. So I totally agree with you, the Yubikey is a great choice for that.
Maybe my previous post was a bit unclear about that.

[xqus]

So... A yubikey is a physical second factor? This is actually quite a cool idea. How did you push out your product so widely? I haven't heard of it at all, but it's widely supported.

Correct.

It is made and promoted by a large Swedish company called Yubico. I do not think notlist3d is involved.

[notlist3d]

So... A yubikey is a physical second factor? This is actually quite a cool idea. How did you push out your product so widely? I haven't heard of it at all, but it's widely supported.

They have done a great job of making  good  products.   They have had multiple generations even, so this got them noticed and put on some great sites as physical second factor.

I love the Yubikey nano for a laptop.  I cant stress how nice it is on 2 factor.  I can leave it in the usb slot and it barley sticks out, so it's not noticeable hardly at all.  But on the sites using it and Lastpass it takes me to press the Yubikey for it to send a key to log in, and it's a unique code it sends each time.

I feel more secure with it then SMS even. With SMS if you were really unlucky it could be forwarded if a good social engineer to another phone, or a phone could be compromised.  Both of these are not worries with Yubikey.

And it is great Blockchain uses it.   Gives you some more security on the most popular hot wallet out there.

[notlist3d]

So... A yubikey is a physical second factor? This is actually quite a cool idea. How did you push out your product so widely? I haven't heard of it at all, but it's widely supported.

Correct.

It is made and promoted by a large Swedish company called Yubico. I do not think notlist3d is involved.

Correct I am just a fan of it.  I have been looking at hardware wallets and other way's to secure digital assets.  This was a product I liked.

I don't own part of company, stock, or involved in any way.   So I make zero off of sales.   I just really liked their quality products so tested it then shared it after I liked it so much.

[trinaldao]

i want to ask, can i save something at yubikey? like notepad or link site?
i have idea to create new blockchain wallet without email,
like this https://blockchain.info/wallet/678a3341-c9df-452e-9cef-dde026fd1bc5 (password trialtrialtrial)

can i do it ?

[romero121]

Its a good idea. Even few countries have their own security wallet technology for securing their important documents as well all personal asset documents.

[notlist3d]

i want to ask, can i save something at yubikey? like notepad or link site?
i have idea to create new blockchain wallet without email,
like this https://blockchain.info/wallet/678a3341-c9df-452e-9cef-dde026fd1bc5 (password trialtrialtrial)

can i do it ?

I am using it in a mix with Lastpass as I really like it as a password manager.  With lastpass you get a "vault" where you can store notes even.   

So I have lastpass with storage of info and security of needing my master password, and my Yubikey.  And my Yubikey you must touch to send a code cannot be done remotely.  So it is pretty good for storage in my use.

[notlist3d]

Its a good idea. Even few countries have their own security wallet technology for securing their important documents as well all personal asset documents.

Physical token are getting more and more common.   Just great tools to add 2nd factor.   I wish all site's used 2nd factor it is truly a great jump in security. 

With 2fa you could have my password and does zero good without my Yubkey.  So add that security to a popular site like blockchain.info I think its great for the money.

[trinaldao]

i want to ask, can i save something at yubikey? like notepad or link site?
i have idea to create new blockchain wallet without email,
like this https://blockchain.info/wallet/678a3341-c9df-452e-9cef-dde026fd1bc5 (password trialtrialtrial)

can i do it ?

I am using it in a mix with Lastpass as I really like it as a password manager.  With lastpass you get a "vault" where you can store notes even.   

So I have lastpass with storage of info and security of needing my master password, and my Yubikey.  And my Yubikey you must touch to send a code cannot be done remotely.  So it is pretty good for storage in my use.

http://lifehacker.com/lastpass-hacked-time-to-change-your-master-password-1711463571
https://blog.lastpass.com/2015/06/lastpass-security-notice.html/

are you sure with password manager ? 

[notlist3d]

i want to ask, can i save something at yubikey? like notepad or link site?
i have idea to create new blockchain wallet without email,
like this https://blockchain.info/wallet/678a3341-c9df-452e-9cef-dde026fd1bc5 (password trialtrialtrial)

can i do it ?

I am using it in a mix with Lastpass as I really like it as a password manager.  With lastpass you get a "vault" where you can store notes even.  

So I have lastpass with storage of info and security of needing my master password, and my Yubikey.  And my Yubikey you must touch to send a code cannot be done remotely.  So it is pretty good for storage in my use.

http://lifehacker.com/lastpass-hacked-time-to-change-your-master-password-1711463571
https://blog.lastpass.com/2015/06/lastpass-security-notice.html/

are you sure with password manager ?  

That article is quite dated look at date, nothing new.    But yes I feel secure as I use 2 factor.

And with Yubikey the great thing is even if they have masterpass does them 0 good.  They need the Yubikey.   So the 2 factor saves you once again.  If you use a password manager use 2 factor.  And I still highly suggest Yubikey.

So those with Yubikey's were in no risk essentially with the 2 factor on lastpass even then.

[Elenkareem]

how about price ?
any ebay link of this product?

You must have missed last part of hands on.   Click on the link: https://www.yubico.com/products/yubikey-hardware/

There are many different versions of it.  And the great thsing is you can pick which is best for you.  This could vary for each person.  I thought I would like one of the longer full Yubikey's.  But I ended up loving the nano version, it's fit with a laptop is just great.  But for everyone it could be different.

Not sure why you would want to get off eBay.  Go direct link I listed above and by direct from manufacture.  I just like buying direct on anything dealing with my security.

thank's for the link, yesterday i suggest some exchanger using yubikey feature
i hope someday exchanger increase his secure system

[notlist3d]

how about price ?
any ebay link of this product?

You must have missed last part of hands on.   Click on the link: https://www.yubico.com/products/yubikey-hardware/

There are many different versions of it.  And the great thsing is you can pick which is best for you.  This could vary for each person.  I thought I would like one of the longer full Yubikey's.  But I ended up loving the nano version, it's fit with a laptop is just great.  But for everyone it could be different.

Not sure why you would want to get off eBay.  Go direct link I listed above and by direct from manufacture.  I just like buying direct on anything dealing with my security.

thank's for the link, yesterday i suggest some exchanger using yubikey feature
i hope someday exchanger increase his secure system

Not a problem It really is a good 2 factor device.  The more sites that use 2 factor the better.  Making a system where if even password is compromised does bad guy no good.... is great.

I suspect we will see more and more 2 factor.  But it's kinda hard to get all sites to add it as a lot of "normal" users think single password is enough.  They are just unaware.

[hulla]

If the yubikey is lost or misplace. How can a user get all the passcode and data saved on the yubikey?

[notlist3d]

If the yubikey is lost or misplace. How can a user get all the passcode and data saved on the yubikey?

Sorry for how long it took saw this today.  It depends on the service you are using.   Most you would have to go through some sort of support for example here is dropbox - https://www.yubico.com/why-yubico/for-individuals/dropbox-for-individuals/#secret

I suggest having backup options where available I personally like one's that allow multiple Yubikeys to be registered where I can keep one safe incase other is lost.  Some can use phone numbers, or google authenticator.  But again varies a lot depending on what service you use it on.