Yubikey - The Ultimate Beginner Guide (How to Setup & Use)

did you know around the world hacker's attack happens every 39 seconds since 2020 pandemic fbi reported a 300 increase in cyber crimes google chrome has been hacked biggest cyber attacks in history a shadow war taking place online between russian and ukrainian hackers matter of fact 91 of online data breaches start with a phishing attack investigates exactly how cyber criminals use email phishing attacks to successfully steal billions if you don't know what phishing attack is phishing is a type of social engineering where an attacker sends a fraudulent message designed to trick the person into revealing sensitive information to the attacker in 2017 google distributed a technology to its 85 000 plus employees made it mandatory to use on top of their regular password and since then it has reported zero successful phishing attempts in this video i'm going to show you guys in and out about this technology developed by a company called the ub co founded in sweden back in 2007. for less than fifty dollars this hardware authentication device will protect access to computer networks and online services if you're here for the first time my name is toriel on this channel we talk about all tech related topics such as tutorials product reviews and crypto content if this is something interests you consider subscribe to the channel and if you enjoyed this video don't forget to drop a like and comment [Music] and now let's talk about what is a yubikey a ub key is this small piece of hardware device it utilizes second factor authentication so when you log into a site you type in your username your email and your password you plug this yubikey in and tap on the copper connector it prompts the ub key to generate a one-time password that's generated on this physical device in other words it's much safer way for you to have access to online platforms and websites and prevent hackers from hacking your email and your password [Music] now let's talk about the packaging and different types of devices ubiko was kind enough to send me these three devices for an honest review they also carry many different types of devices depends on how you use them or what device and computer that you use on a daily basis let's look at this first device this one is called the ubc 5ci if you're predominantly iphone user this one comes with the iphone lightning port as well as usb c port you can plug this device into your iphone or the newer macs that support the usb c port however this one doesn't come with nfc technology which leads to the second device this one is called yubikey 5 nfc which is their best seller and one of the most popular ub keys the retail price is 45 look around the devices if you have a lot of usb a ports on your laptop or your desktop this one is definitely highly recommended for a mobile application as long as your iphone or android supports nfc you can tap the ub key on top of your phone to authenticate and log into your accounts here is a third device which is yubikey 5c and fc unlike the second device this one predominantly is using usbc port and if you're using the newer laptop or desktops you should be using a lot of usbc ports that's why this third device comes in handy because this third device also comes with nfc which means you can still use it on your mobile application simply tap it on top of your phone and also keep that in mind that if you happen to have a usb a version and if you want to use it on usb-c devices you can have one of these adapters on hand and it's gonna do the job vice versa if you want to convert the c to usb-a you can always have these adapters on hand if you decide to get one of these devices i have affiliate link in the description by using the link you are also supporting the channel and me producing this video for you guys which is much appreciated if you're not sure which device you should be getting ubiko has this quiz i'm going to leave the link in the description by taking this quiz it's going to help you define and pick the right item for you and if you just want to have a one device to try out i strongly recommend yubikey 5 series which is 5 nfc and 5c nfc [Music] all right guys in this next segment of the video i'm going to show you guys how to add a ub key into your google account so every time when you log into google products after punching your password is going to prompt you to insert this ub key in order to log in successfully first thing you want to do is come to any of your google products like google.com or ca on the top right corner you're going to see my profile picture click on it once you're going to see this option says manage your google account click on it once this is the google account dashboard you want to come to security which is the fourth option under signing into google you're going to see two-step verification once you open it you should be able to see this window towards the bottom you're going to see one option says security key click on this once simply click on add security key the one we want to select is a physical which is the third option click on next and now the system is prompting you to insert this ub key into your mac so in my case i'm going to insert a uv key now once you insert it you have to touch it with your fingers so make sure you touch it once with your fingers allow this side to add security key i'm going to click on allow a really important part is if you're planning to use one or more ub keys it's important to name these keys properly so in here ub key 5 and fc is what i entered click on next so right there we just successfully added the ub key into your google account click on next one more time here's a few tips for you to read about and i'm going to click on next one more time so from here it's not done yet i'm going to eject this yubi key i just inserted i'm going to insert a second ub key so my plan is to use two on a daily basis one of them is going to be at home the other one is going to be carried around on my keychain and the third one is going to be a backup in this case i'm going to add two more times into my google account and now i have successfully added three ub keys into my google account so moving on forward i can use any one of these keys to log into my google account however i strongly recommend you guys to do one more step go back from the security page just in case down the road in the future i lost all these three keys what i'm going to do is generate a backup code if i lost all these ub keys i'm able to use this one-time passcode to still log into my google account just in case for that extra layer of security i'm going to click on it once and enter your google password click on next because i've already added one of the three ub keys and now i can just insert any of the ubi keys and use it and tap it once and now i'm going to generate a backup code what i do recommend is you print them that's a first backup second you can download this code as a txt file and now with this txt file you can save it on a thumb drive and encrypt this thumb drive and put it somewhere safe in a different location in the future if the paper one you can't find it you can always go access to the thumb drive or you can also do a screenshot if you prefer that method and keep this in mind this is a one-time backup code means if you used it once it becomes inactive you have to regenerate it now i want to show you what if you want to remove one of the ub keys how do you do that just come to security keys by default here and click on the arrow so now let's say i want to remove the yubikey 5 nfc and then click on this icon which is delete the ub key and it's going to say do you want to remove the security key i'm going to click on remove and now that ub key has been removed from your account and the very last point i want to mention here is once you have your ub key added to your google account and you have your 10 backup codes generated feel free to remove the other two steps of verification methods such as sms or voice as well as google prompts so that way you only have a two methods to log into your google account which is ub keys as well as a backup code [Music] now if you have successfully added this ub key to your google account congratulations you have just used one of the methods to use yubikey that's called u2f universal second factor also known as fidel or vital2 protocol i'm going to leave this link in the description you can go check it out yourself here is a list of applications that support ub key on the fido 502 protocol what i just showed you is google accounts however there's many other ones if you're treating crypto i'm going to make a separate video on the crypto subject alone where i'm going to cover coinbase binance all this exchange that's going to show you guys how to add yubikey onto them and you can see here the most popular ones we use on a daily basis could be twitter facebook youtube is here as well government on uk if you play games epic games is another one there there's many other platforms you can see this list is very very long and you can check it out yourself to see if your daily application that supports the u2f portal and now i'm going to show you guys a second way to use this ub key which stands for otp one-time password or totp time-based one-time password if you have experience with a google authenticator app that's basically otp portal where every 30 seconds the authenticator app is going to generate a six digit codes for you to enter in order to log into your platform as long as your platform supports two-factor authentication then you can basically use this otp method i'm going to leave this link in the description again you can come here click on download now it will scroll you down to the bottom of this page depends on what software that you use in my case i'm a mac user i'm going to show you guys how everything is done on mac as well as ios devices which is my iphone right here if you're windows or linux user the steps should be identical first thing i'm going to do is click on the first option says download from apple store click on it it should redirect you to the apple store ubico authenticator app click on open with app store and you want to get and install this app into your mac system once you finish installing the app just click on open you can close the app store now and you can see here on my right hand side i have opened the ubico authenticator app you want to come to your google account come to the fourth option security you want to come to two-step verification click on this error once you wanna enter your password again click on next and we're gonna tap on the ub key and log into your back-end come to the authenticator app and you wanna click on this arrow we are going to basically set up an authenticator app with the ub key just make sure you have the ubico authenticator app open on the side because it's going to scan on a qr code just now once you're ready with that click on setup authenticator and now google is automatically going to generate a qr code for you to scan you might want to do a screenshot on this qr code or print it out like how i showed you guys earlier just in case if anything happens you can always rescan this qr code and re-add the qr code into your ub key once you get everything ready i'm going to click on the top right three dots right there click on it once it's going to show you an option that says scan qr code click on it once if this is the first time using the ubico authenticator app you want to give permission for this app to scan your computer screen basically you want to open system preferences and you want to unlock it by click on this log at the bottom left corner and you want to scroll down and find ubico authenticator and you want to give it a check it will create and reopen it okay you can see here it just reopened click on the top right corner three dots again click on scan qr and this is going to automatically scan the qr on the left it found the issuer which is google and it also found account name which should be your gmail address and now you have the third option here is to either require touch or without it so it's totally up to you i'm going to add account now once you add it into your account you're going to see that it's going to generate six digit codes every 30 seconds so once you scan it i'm going to click on next you need to enter the six digit code and to verify and finish the entire setup once you're done with that click on verify and you can see here now i have successfully added this authenticator app into my google account and now once you have one or more yubikey devices it's really good idea to add all of them at once now just a quick tip here because you have already finished setting up the first uv key with this authenticator app it's good idea to open up the screenshot you had earlier and just open it on the screen you want to use this screenshot qr code to continue loading the authenticator app onto the second and third up key you may have i just insert a second key now i'm going to click on the top right corner three dots again and the scan qr code also going to load the same information the issuer the account number now i have added the same otp qr scan onto two different devices [Music] and now i'm going to show you guys one more step which is to load authenticator app on your ios devices come to app store and click on search in here you want to search ubco that's all you need to type and click on search it should be the first option says ubico authenticator and just click on download this app onto your iphone click on open and now keep that in mind i have already scanned the qr code on all these three devices all i need to do is grab one of them it doesn't matter which one either need to insert a ub key or pull down to activate nfc i'm going to pull down it's going to tell you it's ready for skin now i just need to grab one of the ub key that supports nfc and put it on top of my phone just like that and now authentication has been successfully loaded now you're going to see there's one application i added earlier if you happen to have a 5ci which is one of these devices you just need to insert this device into your iphone immediately it will show you the time-based one-time password [Music] now if you stick to this part of the video congratulations you just learned two different methods to use the ub key on your daily basis just a quick tip here my personal preference here is always do a screenshot on this qr code and save it and store it on the thumb drive and encrypt this thumb drive so just in case if you buy a new ub key you can always open this thumb drive locate the file which is the qr code open it on your desktop scan it with the ubico authenticator app to add this qr code on your new key keep that in mind the otp the time-based one-time code is actually generated on this physical key it's on hardware so if you're currently using the google authenticator app i strongly recommend you guys to actually switch to ubico authenticator app it's much more secure in my personal opinion [Music] you

Channel: Tario Sultan

Views: 138,261

Keywords: yubikey, yubico, how to setup yubikey, yubikey setup, online security, 2FA, OTP, TOTP, U2F, How to use yubikey, 2 factor authentication, authentication, google authenticator, yubikey 5ci, yubikey 5 nfc, yubikey 5c nfc, yubikey 5 nfc review, yubikey 5 nfc setup, 2FA setup, how to use Yubikey 5 NFC, yubikey review, yubikey tutorial, yubikey security key, yubico authenticator, yubikey setup guide, beginner guide, mac, 2nd factor authentication, what is a yubikey, yubikey coinbase

Id: w97VnsfCAEk

Length: 16min 21sec (981 seconds)

Published: Tue May 03 2022