In this blog post you will learn how to use a Yubikey to enhance your digital security and privacy practices, such as using it for 2-factor authentication, using Yubikey for SSH, saving PGP Keys, signing code-commits and much more. With the rising threat of cyber attacks and privacy breaches, finding reliable ways to safeguard your accounts should be a top priority for everyone, especially developers. The YubiKey is a hardware USB security key, which stands out as a versatile and robust solution for privacy-focused individuals. This blog post will explore why a hardware security key like YubiKey is indispensable and provide step-by-step instructions on implementing two-factor authentication (2FA) for your Github account.

Take part in the Global Developer Nation Survey and be a catalyst for change. We donate to charity and you get a virtual goodie bag packed with resources. Plus, you get a chance to win amazing prizes. Start here!

Why you Need Hardware Security Keys

Physical Security
Hardware security keys offer a physical element to the authentication process. Unlike traditional methods that rely solely on passwords, YubiKey provides a tangible key resistant to phishing attacks. The cryptographic hashes used to authenticate you to an online service are saved on your key, and since only you have possession of the device, you can log in. This also protects you from becoming a victim of a malicious or phishing website since they don’t have saved your Security keys to authenticate with.

Versatility
YubiKey supports various authentication standards, including FIDO2 and U2F, which are industry standards for multi-factor authentication, making it compatible with a wide range of services and platforms. Its versatility makes it a one-stop solution for strengthening security across different online accounts.

Privacy Concerns
As concerns about online privacy continue to grow, a YubiKey can help you to mitigate risks associated with password breaches. By eliminating the need for passwords altogether in some cases and providing an additional layer of security in others, YubiKey enhances overall digital privacy. Newer Yubikeys also supports Passkeys, currently the most secure ways of passwordless authentication.

Setting Up YubiKey 5C for Two-Factor Authentication (2FA)

Choosing Services

Begin by selecting online services that support YubiKey for 2FA. Popular platforms like Google, GitHub, and others offer seamless integration. You can check the complete list of all the online services that support U2F / Yubikey here.

Registering YubiKey

Follow these steps to register YubiKey for 2FA on the chosen services we will use it for Github:

Example: Setting up YubiKey 2FA on Google

• Head to your Github account settings into Password and Authentication tab
• Under Two-factor authentication, select Security Keys as your preferred method
• Click Add New Security key
• A pop-up will appear asking you to insert your Yubikey on the USB port of your workstation.
• Insert the security key and touch the pad or press the button depending on your security key model
• This should register the security key, and you can add more keys, such as a backup key, using the same steps
• If your Yubikey supports NFC, you can also add it using a NFC Compatible mobile device

Testing the Setup

Verify the effectiveness of your 2FA setup by logging in with your YubiKey.

By implementing two-factor authentication, you can significantly enhance your online security. Prioritise your digital security, adopt YubiKey, and enjoy a safer online experience.

Stay safe, stay secure!

What other topics interest you? The NEW Developer Nation survey is live. Participate and shape the trends in software development. Start here!