Security Key By Yubico: 2FA That's Simple And Affordable

Decades of consumer computer products have taught humanity one thing: Passwords are bad. To make passwords acceptable again, we’re now turning to password managers and two-factor authentication to better secure our online accounts.

- Max Eddy

Security Key by Yubico is a USB-A key you insert and tap when prompted to confirm your identity. Working in conjunction with a traditional password, it’s a powerful tool to stop scammers and identity thieves in their tracks. The Security Key by Yubico doesn’t have all the bells and whistles of its cousins and competitors, but—at less than half the price—it’s an easy solution at a bargain price. For its low price and ease of use, it’s our Editors’ Choice for two-factor authentication security keys. For a more feature-filled device, look to the YubiKey 5 series, which is more expensive and likely harder for the average person to get their money’s worth.

HOW TWO-FACTOR AUTHENTICATION WORKS

By this point, you’ve probably encountered or at least heard of two-factor authentication (2FA). In the most common implementation, when you log into an account, you enter your password and then are prompted to enter a six-digit code sent via SMS or generated by an app. Then you’re authenticated.

It’s easy to assume that this method is called 2FA because it adds a second step in authentication. While that’s true in practice, the name actually comes from the concept of combining two different kinds of authentication from a possible three: Those are something you know, something you have, and something you are.

A password in your head (or, better yet, in a password manager) is something you know. A fingerprint scan or some other biometric factor is something you are. A piece of hardware or an app that can authenticate you is something you have. While this review looks at hardware security keys, there are other methods for adding a second factor.