Google adds U2F USB key 2 step verification support

[edutech4schools]

While I am happy with the text I get to prove who I am at a new device, Google are releasing support for USB key security.

 

Google launches USB Security Key for super-secure two-step verification | ExtremeTech

Edited October 23, 2014 by edutech4schools

[Marshall_IT]

I use the mobile app and a list of backup codes.

 

This is probably not of interest to me as you might want to log In somewhere you don't have access to a USB port.

[Oaktech]

I don't store anything nearly valuable enough with google to make it worth spending ~£20 on a key and sucking up the sheer inconvenience.

[Marshall_IT]

Who is your personal email account with? As that is your most valuable account you have these days.

 

With that i can reset your Facebook.

I then have all the personal info i need to go through the security checks on all your others accounts including banks.

 

Your email account is likely to contain emails from most services you interact with so i can know which you use and which you don't.

 

No problem if you don't use online banking, i can change your address on the telephone then sign you up for it. Report cards stolen etc..

[Arthur]

This is probably not of interest to me as you might want to log in somewhere you don't have access to a USB port.

You might be able to use NFC with the YubiKey NEO.

[Marshall_IT]

You might be able to use NFC with the YubiKey NEO.

 

Now that I'd be interested in. Still, mobile browsers don't support hardware keys and I'm happy with the software key gen. If i needed the usb key and my phone for nfc is already have my phone.

[Oaktech]

Who is your personal email account with? As that is your most valuable account you have these days.

 

With that i can reset your Facebook.

I then have all the personal info i need to go through the security checks on all your others accounts including banks.

 

Your email account is likely to contain emails from most services you interact with so i can know which you use and which you don't.

 

No problem if you don't use online banking, i can change your address on the telephone then sign you up for it. Report cards stolen etc..

 

Ok,

 

I have 2 emails accounts - they are empty. I don't store mail.

 

My facebbok is the most important service I use and that has 'approve logins' turned on, so I have to approve every login.

 

My online banking requires 2 factor (well, 3 factor actually, random digits from pin, random digits from password and response code from card reader) already, and the telephone banking has security questions you won't find the answers to in my personal information as they are made up.

 

I'm also not nearly interesting enough to bother going after seriously enough to break the above.

[plexer]

I use google authenticator on my phone for google account access and lastpass.

 

I have some yubikey's including ones setup for windows domain logon but don't use them they are cool though.

 

The key pictured in the article is a Yubico U2F key anyway.

 

Ben

Edited October 23, 2014 by plexer

[Marshall_IT]

Ok,

 

I have 2 emails accounts - they are empty. I don't store mail.

 

My facebbok is the most important service I use and that has 'approve logins' turned on, so I have to approve every login.

 

My online banking requires 2 factor (well, 3 factor actually, random digits from pin, random digits from password and response code from card reader) already, and the telephone banking has security questions you won't find the answers to in my personal information as they are made up.

 

I'm also not nearly interesting enough to bother going after seriously enough to break the above.

 

Well that's good news.

 

I'm just constantly surprised by people who do think email is important and don't take these extra steps that you have.

 

I have 2 factor authentication on most of my important services and i really don't find out much of an extra hassle.