SecurityKey
Latest
Lightning-compatible YubiKey 5Ci could secure your iPhone logins
iPhone owners with a mind toward security have a new option for protecting their online accounts. On Tuesday, security key manufacturer Yubico announced the $70 YubiKey 5Ci, which the company says is the world's first Lightning port-compatible security key.
Google’s $50 Titan security keys are now available in the US
Last month, Google introduced its Titan Key -- a physical security key used for two-factor authentication -- and now it's widely available in the US. For $50, you'll get a USB security key and a Bluetooth security key as well as a USB-C to USB-A adapter and a USB-C to USB-A connecting cable.
Mandatory keys cut successful phishing attacks on Google to zero
Google might have just made itself the biggest example of how security keys can work better than other forms of multi-factor authentication. According to Krebs on Security, ever since the tech giant required over 85,000 of its employees to use physical security keys instead of one-time codes in 2017, it hasn't had a single case of account takeover from phishing. "We have had no reported or confirmed account takeovers since implementing security keys at Google," a company spokesperson said. "Users might be asked to authenticate using their security key for many different apps/reasons. It all depends on the sensitivity of the app and the risk of the user at that point in time."
Twitter adds support for login verification with a USB key
Twitter announced today that you can now use a USB security key, such as Yubikey, as part of the two-factor authentication process. It's the latest expansion of Twitter's verification support, which, as of last year, also includes third-party apps like Google Authenticator and Duo Mobile. By using a physical key, you'll be able to sign in securely even in situations where you can't or don't want to have a text message sent to your phone. Facebook, Google, Dropbox and others have added support for security keys in the past.
Google Advanced Protection is for high-profile hacking targets
Many internet giants offer security measures like two-factor authentication (which you should really use) to keep your account safe from hackers. But there are a handful of people who are so valuable as targets that hackers will go after them specifically -- say, election campaign managers. And Google wants to do something about it. It's introducing the previously rumored Advanced Protection Program, an extra layer of security for people who virtually expect cyberattacks. Sign up and you'll put restrictions on your account that will be borderline onerous, but could be vital when you know you're facing a serious threat.
PayPal to offer security key fobs for additional account protection
For every stupendous scam that crafty / immoral individuals pull off on eBay, there's at least a couple phishing scams out there trying to jack your precious eBay or PayPal password and access your hard-earned dollars. PayPal is readying a VeriSign security key that will resemble the RSA SecureID we corporate workers are all too familiar with with, and will sport a monochrome LCD screen that rotates a six-digit password every 30 seconds. Clients who opt to use this device will be able to enter it along with their usual username / password credentials when logging in, which would prevent scammers from accessing their account without the key fob in hand. The firm has been testing the device with employees for "several months," and plans to start trialing it with customers "within a month or so." Personal account owners in America, Germany, and Australia will eventually have the option of picking one up for a one-time fee of $5, while business accounts will receive the unit gratis, but if you're not savvy enough to pass on by those tempting scams, five bucks could be a small price to pay to keep your cash out of strangers' hands.[Via jkOnTheRun]
