Bitcoin Forum
June 16, 2024, 11:39:50 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2]  All
  Print  
Author Topic: [Hands On]Yubikey - Help secure your digital assets - Including Blockchain.info  (Read 3530 times)
This is a self-moderated topic. If you do not want to be moderated by the person who started this topic, create a new topic.
xqus
Full Member
***
Offline Offline

Activity: 172
Merit: 100



View Profile
February 10, 2016, 07:39:43 AM
 #21

Can I ask? Is this "Yubikey" a souped up version of Ledger's HW.1? It works with more than just a few bitcoin wallets, has NFC support, and looks less flimsy?

No. Yubikey is a one time password generator. It has nothing to do with bitcoin, other than some online wallets lets you use it to protect your account, like they also lets you use Google Authenticator, or one time passwords delivered by SMS.

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
xqus
Full Member
***
Offline Offline

Activity: 172
Merit: 100



View Profile
February 10, 2016, 07:46:03 AM
 #22

..snip...
I think Lastpass is pretty good.  There was one exploit for Lastpass they named Lostpass you just need to make sure your signing into your Lastpass and not a phishing site.  Which you really should always check that when logging into a password manger.  And having two factor with Yubikey does help on most possible security problems tremendously.

Just to make sure you know what I was talking about Smiley I don't think LastPass is a bad choice, but it's always good to know:

https://nakedsecurity.sophos.com/2015/06/16/bad-news-lastpass-breached-good-news-you-should-be-ok/
https://paul.reviews/privacy-password-managers-a-reality-check/
https://forums.lastpass.com/viewtopic.php?f=12&t=187485

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
notlist3d (OP)
Legendary
*
Offline Offline

Activity: 1456
Merit: 1000



View Profile
February 10, 2016, 09:12:19 AM
 #23

..snip...
I think Lastpass is pretty good.  There was one exploit for Lastpass they named Lostpass you just need to make sure your signing into your Lastpass and not a phishing site.  Which you really should always check that when logging into a password manger.  And having two factor with Yubikey does help on most possible security problems tremendously.

Just to make sure you know what I was talking about Smiley I don't think LastPass is a bad choice, but it's always good to know:

https://nakedsecurity.sophos.com/2015/06/16/bad-news-lastpass-breached-good-news-you-should-be-ok/
https://paul.reviews/privacy-password-managers-a-reality-check/
https://forums.lastpass.com/viewtopic.php?f=12&t=187485

I'm not debating your knowlege, it is true what your saying.   Also people should realize I picked Lastpass as I liked it.  There are many different password managers you can pick your favorite.

And even if say your master password is stolen the great thing with Yubikey attached, is without it they can't even access your stored info.  So that second factor authentication is important.
notlist3d (OP)
Legendary
*
Offline Offline

Activity: 1456
Merit: 1000



View Profile
February 10, 2016, 09:15:17 AM
 #24

Can I ask? Is this "Yubikey" a souped up version of Ledger's HW.1? It works with more than just a few bitcoin wallets, has NFC support, and looks less flimsy?

No. Yubikey is a one time password generator. It has nothing to do with bitcoin, other than some online wallets lets you use it to protect your account, like they also lets you use Google Authenticator, or one time passwords delivered by SMS.

And I should be clear I'm  not telling people not to get hardware wallets, I'm a strong supporter of them.    They are a great option to use.

I am doing this thread as I think password security for a lot could be greatly secured with Yubikey and software, or 2nd factor log-ins.  Also blockchain is the number one mentioned hotwallet online, and I think Yubikey is great to use as 2nd factor.  So even if your blockchain password is taken they could not log in without your Yubikey.
Decoded
Legendary
*
Offline Offline

Activity: 1232
Merit: 1030


give me your cryptos


View Profile
February 10, 2016, 09:37:07 AM
 #25

So... A yubikey is a physical second factor? This is actually quite a cool idea. How did you push out your product so widely? I haven't heard of it at all, but it's widely supported.

looking for a signature campaign, dm me for that
xqus
Full Member
***
Offline Offline

Activity: 172
Merit: 100



View Profile
February 10, 2016, 09:38:04 AM
 #26

Can I ask? Is this "Yubikey" a souped up version of Ledger's HW.1? It works with more than just a few bitcoin wallets, has NFC support, and looks less flimsy?

No. Yubikey is a one time password generator. It has nothing to do with bitcoin, other than some online wallets lets you use it to protect your account, like they also lets you use Google Authenticator, or one time passwords delivered by SMS.

And I should be clear I'm  not telling people not to get hardware wallets, I'm a strong supporter of them.    They are a great option to use.

I am doing this thread as I think password security for a lot could be greatly secured with Yubikey and software, or 2nd factor log-ins.  Also blockchain is the number one mentioned hotwallet online, and I think Yubikey is great to use as 2nd factor.  So even if your blockchain password is taken they could not log in without your Yubikey.

I agree. Hardware wallets are great. And IMHO the best choice for any bigger amount of bitcoins.
As long as you use an online wallet, you should protect them with 2FA. So I totally agree with you, the Yubikey is a great choice for that.
Maybe my previous post was a bit unclear about that.

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
xqus
Full Member
***
Offline Offline

Activity: 172
Merit: 100



View Profile
February 10, 2016, 09:39:13 AM
 #27

So... A yubikey is a physical second factor? This is actually quite a cool idea. How did you push out your product so widely? I haven't heard of it at all, but it's widely supported.

Correct.

It is made and promoted by a large Swedish company called Yubico. I do not think notlist3d is involved. Smiley

PGP fingerprint: B17233A1 || Bitrated user: xqus ≡ Free trust agent || LocalBitcoins ≡ Buy bitcoins locally
Wallet and Exchange security ≡ A security overview of wallets and exchanges. (forum thread)
notlist3d (OP)
Legendary
*
Offline Offline

Activity: 1456
Merit: 1000



View Profile
February 11, 2016, 01:35:48 AM
 #28

So... A yubikey is a physical second factor? This is actually quite a cool idea. How did you push out your product so widely? I haven't heard of it at all, but it's widely supported.

They have done a great job of making  good  products.   They have had multiple generations even, so this got them noticed and put on some great sites as physical second factor.

I love the Yubikey nano for a laptop.  I cant stress how nice it is on 2 factor.  I can leave it in the usb slot and it barley sticks out, so it's not noticeable hardly at all.  But on the sites using it and Lastpass it takes me to press the Yubikey for it to send a key to log in, and it's a unique code it sends each time.

I feel more secure with it then SMS even. With SMS if you were really unlucky it could be forwarded if a good social engineer to another phone, or a phone could be compromised.  Both of these are not worries with Yubikey.

And it is great Blockchain uses it.   Gives you some more security on the most popular hot wallet out there.
notlist3d (OP)
Legendary
*
Offline Offline

Activity: 1456
Merit: 1000



View Profile
February 11, 2016, 01:39:10 AM
 #29

So... A yubikey is a physical second factor? This is actually quite a cool idea. How did you push out your product so widely? I haven't heard of it at all, but it's widely supported.

Correct.

It is made and promoted by a large Swedish company called Yubico. I do not think notlist3d is involved. Smiley

Correct I am just a fan of it.  I have been looking at hardware wallets and other way's to secure digital assets.  This was a product I liked.

I don't own part of company, stock, or involved in any way.   So I make zero off of sales.   I just really liked their quality products so tested it then shared it after I liked it so much.
trinaldao
Copper Member
Legendary
*
Offline Offline

Activity: 1218
Merit: 1007


Post your ann & bounty just contact me


View Profile WWW
February 20, 2016, 02:44:04 AM
 #30

i want to ask, can i save something at yubikey? like notepad or link site?
i have idea to create new blockchain wallet without email,
like this https://blockchain.info/wallet/678a3341-c9df-452e-9cef-dde026fd1bc5 (password trialtrialtrial)

can i do it ?

INVALID BBCODE: close of unopened tag in table (1)
romero121
Legendary
*
Offline Offline

Activity: 3192
Merit: 1213


Enterapp Pre-Sale Live


View Profile
February 20, 2016, 09:05:06 AM
 #31

Its a good idea. Even few countries have their own security wallet technology for securing their important documents as well all personal asset documents.

█████████████████████
█████████████████████████
█████████▀▀▀▀▀▀▀█████████
██████▀███████████▀██████
█████▀███▄▄▄▄▄▄▄███▀█████
████████▀▀▀▀▀▀▀▀▀████████
█████████████████████████
█████▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄█████
█████████████████████████
██████▄███████████▄██████
█████████▄▄▄▄▄▄▄█████████
█████████████████████████
█████████████████████
 
    CRYPTO WEBNEOBANK    
▄▄███████▄▄
▄███████████████▄
▄██████░░░░░░░░░░███▄
▄████▄▄███████▄▄░░░██▄
▄█████████████████░░░██▄
████░░▄▄▄▄▄▄▄▄▄░░░░░░░░██
████░░██████████░░░░░░░██
████░░▀▀▀▀▀▀▀▀▀░░░░░░░░██
▀█████████████████░░░██▀
▀████▀▀███████▀▀░░░██▀
▀██████░░░░░░░░░░███▀
▀███████████████▀
▀▀███████▀▀
notlist3d (OP)
Legendary
*
Offline Offline

Activity: 1456
Merit: 1000



View Profile
February 20, 2016, 09:48:22 AM
 #32

i want to ask, can i save something at yubikey? like notepad or link site?
i have idea to create new blockchain wallet without email,
like this https://blockchain.info/wallet/678a3341-c9df-452e-9cef-dde026fd1bc5 (password trialtrialtrial)

can i do it ?

I am using it in a mix with Lastpass as I really like it as a password manager.  With lastpass you get a "vault" where you can store notes even.   

So I have lastpass with storage of info and security of needing my master password, and my Yubikey.  And my Yubikey you must touch to send a code cannot be done remotely.  So it is pretty good for storage in my use.
notlist3d (OP)
Legendary
*
Offline Offline

Activity: 1456
Merit: 1000



View Profile
February 20, 2016, 09:50:14 AM
 #33

Its a good idea. Even few countries have their own security wallet technology for securing their important documents as well all personal asset documents.

Physical token are getting more and more common.   Just great tools to add 2nd factor.   I wish all site's used 2nd factor it is truly a great jump in security. 

With 2fa you could have my password and does zero good without my Yubkey.  So add that security to a popular site like blockchain.info I think its great for the money.
trinaldao
Copper Member
Legendary
*
Offline Offline

Activity: 1218
Merit: 1007


Post your ann & bounty just contact me


View Profile WWW
February 21, 2016, 07:22:55 AM
 #34

i want to ask, can i save something at yubikey? like notepad or link site?
i have idea to create new blockchain wallet without email,
like this https://blockchain.info/wallet/678a3341-c9df-452e-9cef-dde026fd1bc5 (password trialtrialtrial)

can i do it ?

I am using it in a mix with Lastpass as I really like it as a password manager.  With lastpass you get a "vault" where you can store notes even.   

So I have lastpass with storage of info and security of needing my master password, and my Yubikey.  And my Yubikey you must touch to send a code cannot be done remotely.  So it is pretty good for storage in my use.

http://lifehacker.com/lastpass-hacked-time-to-change-your-master-password-1711463571
https://blog.lastpass.com/2015/06/lastpass-security-notice.html/

are you sure with password manager ?  Undecided

INVALID BBCODE: close of unopened tag in table (1)
notlist3d (OP)
Legendary
*
Offline Offline

Activity: 1456
Merit: 1000



View Profile
February 21, 2016, 02:28:14 PM
 #35

i want to ask, can i save something at yubikey? like notepad or link site?
i have idea to create new blockchain wallet without email,
like this https://blockchain.info/wallet/678a3341-c9df-452e-9cef-dde026fd1bc5 (password trialtrialtrial)

can i do it ?

I am using it in a mix with Lastpass as I really like it as a password manager.  With lastpass you get a "vault" where you can store notes even.  

So I have lastpass with storage of info and security of needing my master password, and my Yubikey.  And my Yubikey you must touch to send a code cannot be done remotely.  So it is pretty good for storage in my use.

http://lifehacker.com/lastpass-hacked-time-to-change-your-master-password-1711463571
https://blog.lastpass.com/2015/06/lastpass-security-notice.html/

are you sure with password manager ?  Undecided

That article is quite dated look at date, nothing new.    But yes I feel secure as I use 2 factor.

And with Yubikey the great thing is even if they have masterpass does them 0 good.  They need the Yubikey.   So the 2 factor saves you once again.  If you use a password manager use 2 factor.  And I still highly suggest Yubikey.

So those with Yubikey's were in no risk essentially with the 2 factor on lastpass even then.
Elenkareem
Newbie
*
Offline Offline

Activity: 41
Merit: 0


View Profile
February 27, 2016, 09:28:44 AM
 #36

how about price ?
any ebay link of this product?

You must have missed last part of hands on.   Click on the link: https://www.yubico.com/products/yubikey-hardware/

There are many different versions of it.  And the great thsing is you can pick which is best for you.  This could vary for each person.  I thought I would like one of the longer full Yubikey's.  But I ended up loving the nano version, it's fit with a laptop is just great.  But for everyone it could be different.

Not sure why you would want to get off eBay.  Go direct link I listed above and by direct from manufacture.  I just like buying direct on anything dealing with my security.

thank's for the link, yesterday i suggest some exchanger using yubikey feature
i hope someday exchanger increase his secure system
notlist3d (OP)
Legendary
*
Offline Offline

Activity: 1456
Merit: 1000



View Profile
February 27, 2016, 09:03:46 PM
 #37

how about price ?
any ebay link of this product?

You must have missed last part of hands on.   Click on the link: https://www.yubico.com/products/yubikey-hardware/

There are many different versions of it.  And the great thsing is you can pick which is best for you.  This could vary for each person.  I thought I would like one of the longer full Yubikey's.  But I ended up loving the nano version, it's fit with a laptop is just great.  But for everyone it could be different.

Not sure why you would want to get off eBay.  Go direct link I listed above and by direct from manufacture.  I just like buying direct on anything dealing with my security.

thank's for the link, yesterday i suggest some exchanger using yubikey feature
i hope someday exchanger increase his secure system

Not a problem It really is a good 2 factor device.  The more sites that use 2 factor the better.  Making a system where if even password is compromised does bad guy no good.... is great.

I suspect we will see more and more 2 factor.  But it's kinda hard to get all sites to add it as a lot of "normal" users think single password is enough.  They are just unaware.
hulla
Hero Member
*****
Offline Offline

Activity: 1820
Merit: 566



View Profile
May 16, 2016, 07:25:34 PM
 #38

If the yubikey is lost or misplace. How can a user get all the passcode and data saved on the yubikey?

.
.Duelbits.
            ▄████▄▄
          ▄█████████▄
        ▄█████████████▄
     ▄██████████████████▄
   ▄████▄▄▄█████████▄▄▄███▄
 ▄████▐▀▄▄▀▌████▐▀▄▄▀▌██

 ██████▀▀▀▀███████▀▀▀▀█████

▐████████████■▄▄▄■██████████▀
▐██████████████████████████▀
██████████████████████████▀
▀███████████████████████▀
  ▀███████████████████▀
    ▀███████████████▀
▄▀▄
█   █
█ █ █
█ █ █
█ █ █
█ █ █
█ █ █
█ █ █
█ █ █
█▀▀▀▀▀█
▀█▀█▀
█▄█
█▄█
▄▀▄
█   █
█ █ █
█ █ █
█ █ █
█ █ █
█ █ █
█ █ █
█ █ █
█▀▀▀▀▀█
▀█▀█▀
█▄█
█▄█
.
         ▄ ▄▄▀▀▀▀▄▄
         ▄▀▀▄      █
         █   ▀▄     █
       ▄█▄     ▀▄   █
      ▄▀ ▀▄      ▀█▀
    ▄▀     ▀█▄▄▄▀▀ ▀
  ▄▀  ▄▀  ▄▀
 ▀▄    ▄▀▀
Live Games

   ▄▄▀▀▀▀▀▀▀▄▄
 ▄▀ ▄▄▀▀▀▀▀▄▄ ▀▄
▄▀ █ ▄  █  ▄ █ ▀▄
█ █   ▀   ▀   █ █  ▄▄▄
█ ▀▀▀▀▀▀▀▀▀▀▀▀▀ █ █   █
█▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█  █▄█
█ ▀▀█  ▀▀█  ▀▀█ █  █▄█
█  █    █    █  █  █ █
Slots
.
        ▄▀▀▀▀▀▀▀▀▀▀▀▀▀▄
        █         ▄▄  █
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▄       █
█  ▄▄         █       █
█             █       █
█   ▄▀▀▄▀▀▄   █       █
█   ▀▄   ▄▀   █       █
█     ▀▄▀     █   ▀▀  █
Blackjack
.
▄▄▀█████▀▄▄
▄▀▀   █████ ▄▄▀▀▄
███▄  ▄█████▄▀▀▄███
██████▀▀     ▀▀██████
█ ▀▀██▀ ▀▄   ▄▀ ▀██▀▀ █
█    █    ███    █    █
█ ▄▄██▄ ▄▀   ▀▄ ▄██▄▄ █
██████▄▄     ▄▄██████
Roulette
.
█▀▀▀▄             ▄▀▀▀█
█ ▀▄ ▀▄         ▄▀ ▄▀ █
▀▄ ▀▄ ▀▄     ▄▀ ▄▀ ▄▀
▀▄ ▀▄ ▀▄  ▀ ▄▀ ▄▀
▀▄ ▀▄ ▀▄ ▀ ▄▀
▄ ▀▄ ▀▄ ▀▄  ▄
█ ▀▄ ▀▄ ▀  ▄▀ █
▄▀▄ ▀▄ ▀ ▄▀ ▄▀▄
Dice Duels
notlist3d (OP)
Legendary
*
Offline Offline

Activity: 1456
Merit: 1000



View Profile
June 07, 2016, 03:12:13 AM
 #39

If the yubikey is lost or misplace. How can a user get all the passcode and data saved on the yubikey?

Sorry for how long it took saw this today.  It depends on the service you are using.   Most you would have to go through some sort of support for example here is dropbox - https://www.yubico.com/why-yubico/for-individuals/dropbox-for-individuals/#secret

I suggest having backup options where available I personally like one's that allow multiple Yubikeys to be registered where I can keep one safe incase other is lost.  Some can use phone numbers, or google authenticator.  But again varies a lot depending on what service you use it on.
Pages: « 1 [2]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!