Setup a 2FA Key for MAXIMUM Online Security! (Yubikey Tutorial)

Using the Yubikey 5 series, learn exactly how to setup and use your 2FA key not just as a key, but also as an authenticator. Get your own Yubikey using my affiliate link: geni.us/yubico-store
*This is not a sponsored video, but the links to Yubikey are affiliate links, which means that I will receive a commission if you use the links to purchase your own keys. Thank you for your support!
If you care about your personal security and privacy online, download my free security checklist here:
✅ Security Checklist: www.allthingssecured.com/secu...
🔹🔹🔹What You Should Watch Next🔹🔹🔹
We've got a lot of great privacy- and security-related content here on the All Things Secured KZbin channel (although we admit we're a bit biased). If you're wanting to increase your online cybersecurity, here's what's next:
✅ Change these 7 Facebook Privacy Settings NOW! • How to Change Your Fac...
✅ STOP Using VPNs! (here's why): • Don't Use a VPN...it's...
✅ Are spy apps safe? • DON'T USE MOBILE SPY A...
🔹🔹🔹Help Support All Things Secured (Recommended Services)🔹🔹🔹
If you enjoy this kind of practical security and privacy content, one of the best ways you can help support this channel is by using these affiliate links to our favorite products and services. When purchasing through these links, you not only get the best available deal, the companies will also pay us a small commission. Thank you for your support!
✅ Recommended Password Manager: www.allthingssecured.com/yt/1...
✅ Recommended Identity Monitoring: www.allthingssecured.com/try/...
✅ Recommended 2FA Security Key: www.allthingssecured.com/yt/y...
✅ Recommended Secure Email: www.allthingssecured.com/try/...
✅ Recommended VPN: www.allthingssecured.com/try/...
*********************
Video Timestamps
*********************
0:00 - Use 2FA Keys to Secure Your Accounts
1:06 - Buying the Yubikey 2FA Keys
2:43 - How to Setup a Yubikey 2FA Key (Gmail)
5:30 - Yubikey Authenticator vs Google Authenticator
7:27 - How to Setup Yubikey 2FA Authenticator on Facebook
9:15 - Lock Your Computer with Your 2FA Key
10:17 - Congratulations! You're Now Set Up
*********************
Setting up a Yubikey 2FA security key isn't a difficult process and thankfully it only takes 5-10 minutes. In this video, Josh walks through the entire process for both Google and Facebook so that you can see what is required to get these only accounts secured.
Purchase your own Yubikey here (affiliate link): geni.us/yubico-store
#yubikey #2fa #cybersecurity

[@AllThingsSecured]

Do you use a 2FA key for your logins? Let me know in the comments below! Grab your own Yubikeys here: geni.us/yubico-store

[@greatgg9472]

when i put the code , it's said invalid. :(

[@coffeecryptoconstruction2582]

Trying to setup a backup key on coinbase. I got the 1st one hooked up but the backup doesn't seem to want to Hook up.

[@ranzali5564]

If YubiKey is the default 2FA method... is it advisable to have other methods like "Google prompts" also enabled (Or does that negate/undermine the purpose of the Yubikey)?

[@JohnBoonBeanDutchman]

The price of that key is just ridiculously high, if you take 2 you will lose €150,- euro €15,- would be a reasonable price. then they say that it will last 30 years, but the usb input that also changes every once in a while and they can probably make those things for a €1, if we wait a few more years, I think there will be several brands or systems on the market, think that now only people who are willing to pay the price for it who have cripto or other valuable things online and if the rest don't come to purchase they will automatically become cheaper, for this price I just feel for me as a ripped off, I already had seen one other brand just for €13,20 but was sold out now for the moment, I think I it say it was a 2FA key

[@cooldog60]

Code is not working.

[@angelh1743]

Finally!!! Someone who know how to explain the actual Yubico app. I went through 17 videos before I found yours. Thank you so much for clearly explaining how this all works.

[@dcovatech]

Excellent presentation. At first I was confused about the backup key. In the IT industry a backup implies a copy, a duplicate of such as a file or the contents of a hard drive. But I eventually learned that in the case of a security key, a backup is not a copy, a duplicate, of the first key. A backup is a second key independent of the first key. It took me a bit to unravel how the backup term was used so differently in the context of security keys.

[@marybaker8582]

I have been looking for a way to use my key for a while. You're the first person who has been able to explain how to utilize it correctly, and most importantly, easily.

[@AllThingsSecured]

Great! 🙏

[@anotherwatch]

Just the video I needed. Saved me a lot of time. Thanks for all the explanations.

[@AllThingsSecured]

Glad it helped!

[@harpersneil]

Really great video, thank you. Absolutely going to pick a Yubikey and naturally I'll be using your affiliate code to do so.

[@AllThingsSecured]

Thanks for the support! And I hope you enjoy using the new key!

[@ephemeralsamsara]

This is a great and informative post. Thank you for posting this, I don't have a physical key, however you really have sold the benefits and I believe I'll definitely be getting one.

[@AllThingsSecured]

Great to hear! Like I said, there are free ways to do 2FA, so I would only use the key if it fits in your budget. But I love using the key over the authenticator app.

[@ephemeralsamsara]

@@AllThingsSecured The apps are what I currently use and they have their place, however you really demystified 2FA in terms of physical devices and that's definitely the way I'd like to go. Thank you very much

[@CapitanFantasma1776]

This is all so new to me. Thanks!

[@3D_CryptoCamo]

I really enjoy your video! Thank you!

[@efuller6770]

Wife just got sent some of these from her work and I hadn't seen them before. Suspected they were something like this but thank you for the informative video

[@AllThingsSecured]

My pleasure 👍🏻

[@MR-nz8bv]

I watched 4 videos on the Yubikey and still didn't understand how it should be used until I watched this video. Thank you!

[@AllThingsSecured]

Glad to hear it!

[@robertabendroth7110]

Thank you for your work on our security. As a man who teaches security, I am not finding a video on what I consider to be a core threat to a person's security, "MySpy" and other embedded spay software that may or is installed on peoples phones and computers. It is well understood and highly used by those "actors" who use them, the public is oblivious. To me, if you are talking security, this a a MUST presentation: 1) to create the awareness of what Spy software is. 2) How spy software works, is installed and can track you, intimately. 3) A. How to combat it? B. How to not allow it to be installed on your tech (iPhone / Laptop) C. How to detect it (very hard to do) D. How to get rid of it (regardless if you know you have it.) To me, this is a fundamental to any website / KZbin channel focussing on security. Maybe you already have a video on this topic, is so, I did not find it and I apologize. If you do not have this video, this is a MUST video and to me, number ONE for anybody taking iPhone / Laptop and Internet security. A MUST!!!

[@drakezen]

Great idea! Thanks for the reminder to do something like this

[@AllThingsSecured]

My pleasure!

[@ryaniglesias6381]

Josh, as usual excellent video

[@AllThingsSecured]

Thanks, Ryan!

[@AlejandroBelloRD]

First I've watched each of your "ditch Google Authenticator" and yubikey series at least once. I just wonderedd if you happend to know / recommed a NFC reader addon for Windows laptops. Plugin and removing that USB connector over and over could really wear down the gizmo in a rather short time. Thank you and keep up adding more excellent videos.

[@zen-ventzi-marinov]

Same with my wife. I store my second wife in a secure storage that I'm not going to tell you about.

[@AllThingsSecured]

😂😝

[@TheDaizM]

Not so secret. We all store them at work, lol

[@namo1746]

Because its Halal as a muslem, I have stored 2 wives in the same house and start my journey to find the third then the fourth one.

[@GerryVeerman]

Unsubscribing. This has ‘Yubico promotion channel’ all over it. Hilarious. Next video’s maybe have a second corpse play the dumbo with moron questions and comments. Shopping channel vibe. 😂

[@NoPlus500]

Great comment

[@fannet4629]

Love this! Fantastic advice and ive gone ahead to buy one. You should so do an Every day carry video that would be awesome.

[@AllThingsSecured]

Thanks for the suggestion! It's on my list.

[@aribriddell]

Thanks for the Tutorial!!

[@karlkiyotaka]

Thanks man, Imma buy it soon!

[@monkey2bize]

great video! informative and to the point

[@AllThingsSecured]

Glad you liked it!

[@coweatsman]

I am yet to start using these keys. I am waiting for 2 keys from Yubico, a Yubi 5 NFC and a 5C NFC. From watching a few videos while waiting delivery it looks like it will be a steep learning curve.

[@10GTech]

Thanks for this video!

[@AllThingsSecured]

I’m glad it was helpful!

[@Pfsensepluss]

Hello thank you so much for making this video , This is just what i needed as my yubi's are being shipped , Thank you sir .

[@AllThingsSecured]

Glad I could help!

[@Fallkener]

Hey, i just got my Yubico key thanks to you.

[@AllThingsSecured]

Awesome! Enjoy it. 👍🏻

[@Jaymac0929]

Im going to try this thanks for the Review. 😎💯💯💯

[@AllThingsSecured]

Good to hear! Let me know how it turns out.

[@kristinlow1205]

This was a great intro - thank you. The same flow in 2024 now includes passkeys, and it's quite confusing how the two concepts relate to each other.

[@Bazsi-io8yw]

Love it!

[@sidi4735]

"my wife and I have each other's backups" 👌🏽perfect line right there.

[@AllThingsSecured]

Thanks, Sidi.

[@AFiB1999]

It is really cool and secure but... only bad side is: Holds only 32 TOTP entries. So if you have more that 32 you better off using Authy or Bitwarden premium TOTP to store non important TOTPs and keep the important ones on your ubikey. I learned the hard way :/

[@kingpanda6585]

I was actually planning on buying a ubikey to secure my bitwarden master email. Is it possible?

[@AFiB1999]

@@kingpanda6585 you can secure your bitwarden with yubikey

[@kingpanda6585]

@@AFiB1999 awesome. I'll look into that. Thanks!

[@Bushchannel]

Love your vids man.

[@AllThingsSecured]

Thanks so much!

[@fredrickcallahan4292]

@@AllThingsSecured Hi Josh, Thanks for your content, you're the first guy I watched who really explained YubiKey in an easy to understand manner and I've finally gotten to assigning my 3 NFC 5 YubiKey's. Q: Is it possible as a last backup to print the QR code (Yubico, Google Authenticator or both) and keep it in a security lock box? In case my keys get lost, or I pass on, and have the QR codes attached to my will and last rites?

[@ashleymelo272]

They just released the Yubikey Bio, Now it has a fingerprint reader and makes sure it’s actually you.

[@AllThingsSecured]

I just ordered mine and I’ll be reviewing it soon!

[@GabrielHenrique-jl2ex]

@@AllThingsSecured I'll wait for this video :)

[@jerrysanders9101]

They been sold out for weeks ughhh

[@jerrysanders9101]

Hey when you connect two keys, if you lose one, the backup key will access your website just the same as the original key you lost? Thanks Ashley!

[@walterharris6311]

Awesome thanks 😊

[@AllThingsSecured]

My pleasure, Walter!

[@ikust007]

Thank you !!

[@AllThingsSecured]

You’re welcome.

[@Alfonso6143]

Excelentísimo video saludos.

[@adeshsaxena5203]

Nice video

[@abimaeljr1]

Thanks by your video!!! Very good material Which adapter to USB C to USB A did you use on the video? Do you think I could use any kind of adapter on Yubikey? I am Brazilian and Yubikeys are very expensive here.. so I would choose only one to use in several devices another question: So far I read about use Yubikey NFC with Ipad but it seems that NFC does not work. It seems that I HAVE to buy an Yubikey 5Ci to use lightning . Is that correct ?

[@ikust007]

Finally !

[@gossedejong9248]

thank you, Sir!!!!

[@AllThingsSecured]

You're welcome! Hope this helped 🙏

[@Josh-py9rq]

The yubikey also survives the washer I accidentally had to test this out and it still works like a charm 😂

[@Jool4832]

Which Yubikey model survived the washer?

[@markwinter5655]

Question. If I use the Yubikey can I eliminate the use of the authenticator app or do you recommend both?

[@yamahatracerclub]

Thanks for the information, just purchased me 4 of those. Can you please let me know if I setup the yubikey as my authentication should I remove all other 2FA options? Let’s say remove the sms option? I’ll be glad to know. Thanks 🙏 again

[@mitchellquartero]

I’m planning on buying it thanks

[@AllThingsSecured]

Good for you 👍🏻

[@Cheyenne07]

Another great video. I've just received my Yubikey 5 on the basis of your brilliant tutorial. I want to ask, would it be possible to have a video to show how to remove a key should you lose it. I'm sure its pretty easy. Many thanks.

[@tainshabinnez9679]

I just got my first Yubikey the other day and I did a bunch of reading so I may not be an expert, but they stressed that you should get two keys 'cuz if you lose one, you'll never get into those accounts again. They even recommend that you put the 2nd key somewhere offsite and preferably in a fireproof box/safe.

[@eganzale]

Do you know if consumers can use the 5C FIPS series keys? I'm wondering if the regular 5 NFC series differs from the 5 FIPS series other than the added level of security on the FIPS. I ask because I'm wondering if let's say you want to secure your gmail account with the regular 5 series, can you also do it with the 5 FIPS series? Or are most accounts the average user utilizes only compatible with the regular 5 series and not the FIPS series? If I can still use the FIPS series that has government level 3 encryption vs. the regular 5 series, which only has level 1 encryption, than I'd rather just make the investment and pay slightly more for the FIPS version and get added security but I'm not sure if it's ONLY for government use or can regular consumers use it to and for the most part it would still function like the regular 5 series but with the added protection? Thanks for making your content, it's valuable in today's digital world 👍❗

[@EvaderGuy]

Hello, great content, thanks for sharing your knowledge. I have an iPhone, iPad and iMac. Would you suggest nothing types of keys (plug in and NFC)? 7:22

[@Carlosjousuesalcedo]

Thank you with this video !!! This video helps !!!! !!!!! 😎 !!!

[@AllThingsSecured]

Glad to hear it.

[@Carlosjousuesalcedo]

@@AllThingsSecured 😎 !!!

[@philmarsh4732]

so once programmed i can remove key from usb port untill required again yes ? can i just leave key in port all the time ?

[@RozemVlog]

How about if the person trying to log in using key loggers will they be able to log in your KZbin channel if you are using security key?

[@dalriada842]

I've just bought two of the type A Security Key NFC ones. The 5 series is more than twice the price in the UK. I'll stick to using a free authenticator app for that additional functionality. It's a pity they don't have a version with type A on one end, and type C on the other. Only two of the machines I use have type C. In hindsight, I should maybe have got the type C for future proofing, and used adaptors left plugged in to the devices, but I didn't think of that. It's better to phase out the need for adaptors over time, as type C takes over, rather than increase the need to use them.

[@plamentodorov8468]

Hey Josh - great content! A quick question to you - if you come across a website that supports both an app and physical key authentification, do you set up an app authentication too or do you stay with only the key? Say, for example, you have an Authy authentication set up but eventually you also purchase a Yubikey - would you kill the Authy authentification or keep both running in parallel? Thanks and cheers!

[@AllThingsSecured]

Great question. It depends. Sometimes I keep the authenticator app setup as a backup. So if the website allows me to setup multiple 2FA keys, then I prefer to do that. If not, then I'll setup the key as my primary and the authenticator app as the backup.

[@plamentodorov8468]

@@AllThingsSecured Thanks Josh - appreciate it! Keep up the great work you're doing!

[@virgilwalker683]

If you have someone that wants to exploit your account or your device, and they using a Linux to hack your account or your device, You have to set up another key.

[@spi1141]

I have NFC 5 and I downloaded as you instructed for the login on Win10 but it's not working, or perhaps I missed a step. Did you say to use the Microsoft login or the Yubikey login to start things. Fortunate for me I have the option of using the Microsoft key to get to my desktop but I want the encryption that Yubikey provides. Thanks.

[@JaredJacobsonLaw]

Nice thx 🙏

[@AllThingsSecured]

No problem 👍

[@dazzawm4776]

I am having trouble using my Yubikey and Google account on my Android phone. When it asks for key I hold it on the back via NFC but then it gives me some options to 'open with'. What do I choose as it won't allow my account any further?

[@pedroblanco8311]

Hi Josh, 1st I'm relatively new to your channel, and I'd like to thank you for taking the time to upload a text file for your videos. This allow a multilingual household to watch this with excellent subtitle language options. 2nd, I've listened to this video twice. It's very good, and I'm quite close to buying one of the Yubikeys you presented, however have an important question. How many google or gmail accounts can I pair with one yubikey? I heard you say that your wife has you covered on her keys, and you do the same for her, and this makes sense, however do you know what the limit is for one key? If you already have a video covering this, please send the link in your response, and I'll watch it. Your language functionality is very much appreciated! Thanks for your help

[@AllThingsSecured]

Thanks, Pedro. I don't believe there is a limit to the number of accounts you can use with one key, although the number of keys you can use with one account is limited by the online account (i.e. Google). So glad the captions are put to good use! I'll keep having them transcribed.

[@pedroblanco8311]

@@AllThingsSecured Thanks Josh!

[@pnachtwey]

I have a yubi key but I can only use it with Google and Microsoft for now. My brokerages, banks, medical site do not support it...yet. It a good idea but it is too early now.

[@thetourminator]

Windows question: Are the YUBIKEY series 5 products compatible with Windows 7 ? Or compatible with only Windows 10 and above?

[@lgalina997]

Suppose I have a system image of my PC located on rescue media (e.g. cdrom) and safely stored off site; the image can be restored by booting PC to the cdrom and restoring from the image. because the BIOS has been told to boot from the cdrom drive first. Now I set up the PC to require Yubikey for access to the PC. Then I lose Yubikey(s) and/or forget password(s) so that I can no longer use the PC. Has Yubikey blocked the PC Bios from booting from a rescue cdrom if it finds one in the cdrom drive?

[@bretr5886]

As always great video. I do have one question so far lol. My key chain has a pretty strong magnet on it will this affect the key's data?

[@AllThingsSecured]

I don’t think so, but as with anything electronic, I think it might depend on how strong the magnet is.

[@claystone7729]

The Older versions of the Google authenticator app does not contain and export feature? I will more than likely just have to use my old phone long into any accounts and disable and re add the app to the new phone.

[@sahinsarkar7293]

we can only use 2FA if the website we are authenticating in provides it, am I right? If yes, then how do we use 2FA in sites that don't provide the option?

[@PaulTodd-ec9bw]

Not sure why…but iPhone when 2fa is activated with security keys will still allow you to change your iCloud password word using a trusted device, IE, faceid or passcode, but still doesn’t require the YubiKey to verify? What’s the point if someone has your passcode and youre trusted device?

[@Wandering_Horse]

Informative video, my yubi keys literally just shipped today. I purchased a 2 pack of the NFC 5, I got the USB A style so I can use it with my PC. I am hoping I can set it up on my phone which is USB C since I won't physically be able to plug it in....hmmm

[@AllThingsSecured]

You can always use the NFC (just tap on the phone instead of plug in).

[@LimitedWard]

NFC is way more convenient for mobile than plugging it into your phone's charge port anyways.

[@donaldjeansonne8667]

Can you explain the maximum number of login 2FAs on a single key? Is it possible to use the basic FIDO or other method on some sites and get more access on a single key? Is this practical or not? Thanks for your videos.

[@adamkhan2646]

Probably the craziest thing is I just got my Yubikey 5c and standard 5 today lool

[@chrisrjrose]

My Windows and Mac computers both ask me for a PIN before I use my Yubikey. So I am enter username, password, interting Yubikey, then the PIN then touching then Yubikey... It's way too many steps. What am I missing as this seems to me to be too many steps...

[@philmarsh4732]

hi great vid i have desk top with windows 10 my sis has desk top windows 11 my mobile is old i5s that i use for 2 step verification so whats best yubikey 5 or 5 nfc

[@tradehut2782]

What is you lose the ubikey or it gets damaged or just stops working after a few years?

[@heinsterr]

Your email was shown at 8:07, I hope you can fix this because you were trying to blur it out before. if you pause it at the right time you get it.

[@shaned7545]

Need to download Yubi app just to read the codes???? Does this depends on the type of Yubi key being used???? I saw some tutorials wherein they don't use Yubi app just to read the codes.

[@jerrykong8819]

Does this protect your against someone stealing your laptop and using a boot up file?

[@philmarsh4732]

hi , can yubikey be used to set up 2fa on usb router port for more security

[@nylimoman]

if i set up 2fa yubikey with a bank account on 1 computer then log in on a different computer do i need the key on both computers?

[@Mark.Richter]

Great video. Tried your code on YubiKey and it says it isn't valid. Also, searched your videos, but couldn't find any on protecting yourself when using public wi-fi, do you have or plan to do a video on that?

[@thegreatfilter2413]

hi . Thanks for the info! Perfect timing. Once I have the yubikey set up do i delete the Google Authenticator 2FA app form my phone? or do they both work together now ie authenticator only works with the yubikey. Thanks in advance

[@AllThingsSecured]

They can both work together. If you want to delete Google Authenticator, I would first export your codes to a single QR code, just to be safe. 😎

[@PaintingWithYovette]

I am confused. Do you need a different key for every gmail account, and youtube account? Also do you need a different key for each computer you have, or can one key be used on multiple computers?

[@NoEgg4u]

I will try to answer. But I am not 100% certain of my answers. I think that I understand the process. But I never used the Yubikey. Hence, my not being 100% certain. When you use the Yubikey to log in to web sites, you are telling those web sites that your password consists of 1) what you typed in to create the account, and 2) some data that is stored on the Yubikey flash drive. So just as you can use the same password on multiple sites, I am nearly positive that you can use the same Yubikey for multiple web sites. When our host stated that he has a backup Yubikey, I believe that that means that he has two flash drives (two Yubikeys) that are both registered with his web sites. Therefore, he can use either of his Yubikeys. The web sites probably do not care which one he plugs in. Either one should work, because our host registered both of them with the web sites. As to you question about needing a different key for each computer: My guess (and I am pretty sure about this) is that you can use your Yubikey on as many computers as you choose (just as using the same password on as many computers as you choose). I highly doubt that when you use your Yubikey on one computer, that some record is made to disallow you using your Yubikey elsewhere. And whether you use a Yubikey, or you do not use a Yubikey, you should never use the same password on more than one site. Although, for people that will still use the same password on multiple sites, then the Yubikey will make their account less vulnerable (I think). Maybe our host will confirm the above, and point out if I got something wrong. Lastly, if someone has physical access to your computer, then nothing (short of full system-wide disk encryption) will keep out a skilled attacker from gaining access. There are free tools that can be installed on a bootable flash drive that will defeat all login measures. Cheers!

[@PaintingWithYovette]

@@NoEgg4u Wow, thank you for that detailed description. I have been searching for a long time and getting no answers from anyone, including this host. So I thank you again. It all made sense what you provided! 🥰

[@AllThingsSecured]

You don’t need a new key for every account and device. The same key can be used for all your accounts and devices at the same time, and I recommend you also have one extra backup key for all those same accounts and devices.

[@PaintingWithYovette]

@@AllThingsSecured Gosh, thank you so much. Finally an answer simply put that I can understand

[@michaeleichner7522]

Great video. I have a few questions: 1. Am I correct in my understanding that Yubikey will work on every website that uses 2FA? In other words, any site that isn’t setup to use a security key, can use the Yubikey authenticator app instead of the key? 2. How will I know BEFORE I try to login if I need to use the Yubikey authenticator app, or my Yubikey without using the Yubikey authenticator app? 3. You mention using Yubikey and 2FA when logging into websites. Is the process the same when logging into an IOS or a Windows app? Thanks Thanks

[@naytoeaung]

1. True, it works on every website that offers 2FAs, and you can use Yubikey authenticator app instead of the key when the site doesn't offer the physical keys as 2FAs methods. Yubikey/ Yubico Authenticator app has the same functionality as google authenticator, Authy, etc,.. but it stores in the key, which is more secure than those google and Authy. 2. It depends on which method you set up as the 2FAs options. If you set up with Yubikey, the site will ask you to provide Yubikey. Likewise, if you set up with the authenticator app, the site will ask you for the 2FAs code that the yubikey/ yubico authenticator will provide. If you set up both methods as the 2FAs in the particular site, the site should ask you to make the choice between the physical key and the authenticator app. 3. The process is the same as using in ios, android, windows, mac or linux if you set up with the yubikey/ yubico authenticator app. For the physical key option, I find that some ios/ android app doesn't accept it, which means you can authenticate only with the authenticator app. For example, Proton Mail iOS app.

[@dickthompson9129]

I have been searching for a clear answer to how to use YubiKey as a 2FA for Microsoft Onedrive Personal Vault. All discussions that I have read so far confuse me. Am I missing something? Have you discussed this anywhere? Please advise. Thanks.

[@paulbeattie]

What happens if you lose ALL your physical Yubi keys... it there a backup way to get back into your accounts or even get a replacement key? I suppose if there was it would defeat the purpose but the risk of being permanently locked out is definitely a problem.

[@AllThingsSecured]

You’re exactly right, Paul. Most accounts give you backup codes that you can print out and keep in a safe if you want. The bottom line is this: when you’re responsible for your own security, you need to be careful!

[@userEllipsis414]

Question, A Yubikey must contain some sort of software... is there any open source software that works in a similar way that you could..for example install onto a drive dongle ? Be interesting if you could make your own key.

[@jvianneyjr]

What's the Best yubikey 5 NFC or yubikey security key NFC? Whats the diference?

[@DRKASSIANO]

HI, Do you guys recommend to get 2 for backup?

[@thomasnyangala2424]

Very interesting

[@AllThingsSecured]

I hope it was helpful, Thomas.

[@thomasnyangala2424]

@@AllThingsSecured Quite helpful indeed. Thank you.

[@10_Roads]

Why do google need to see the make and model of the key? Is there any way to bypass this on Windows? My friend on Linux could just select "no" and still get the key working.

[@henriquedossantos6519]

Hi there Josh. One question I have, all my authenticator codes are on google authenticator app, and I want to transfer them all on my Yubikey as backup. Is this possible? or for each of my codes, I have to do this manually? I preferred to key the Yubikey rather than a mobile device or tablet. Thank you, keep up the good videos informing the community.

[@AllThingsSecured]

Unfortunately yes, any transfer has to be done manually at this point, which is frustrating and time consuming, I know.

[@AlexandriasTech]

I just got a pair of Yubikeys. I'm debating if I still want to use it to lock down my computer lol!

[@AllThingsSecured]

I know what you mean. For me, I don’t - it’s just not necessary.

[@pedroblanco8311]

Hi Josh, which of the Yubikey products would you suggest for a first time user? I'd take your advice, and buy 2. I'm not excited about the fingerprint or biometric option. I have used an iPhone in the past, however currently am using Android. Lastly, I'd just like to double confirm I understand an important detail. If I have 3 separate gmail accounts, I can use the same 2FA key for all 3?

[@AllThingsSecured]

For most people, I think the Yubikey 5 NFC is the best option. However, if you're deep in the Apple ecosystem, it makes sense to purchase both a 5Ci (for the Apple connector) and a 5 NFC. And yes...you can use the same two keys to lock up as many Gmail accounts as you like 👍

[@pedroblanco8311]

@@AllThingsSecured This is extremely helpful! Thank you Josh!

[@paulkennedy4305]

Just found you and subscribed. Good content. Thank you. Question -- What if your computer is stolen and you have g mail set to recognize your computer and the person has your password with 2FA SMS code popping up on your Macbook message window- is your g mail account accessible without the Yubikey when your Yubikey is not set up to lock your computer? Thank you.

[@AllThingsSecured]

Great question, Paul. If your computer was stolen, the person would first need to hack your password to get into the computer (you do password protect your computer, I hope). After that, yes, they would have access to your email account. Thankfully, if your computer were stolen, you could easily log into your Gmail account and tell Google that this device is no longer trusted, and NOW they won't be able to log in without your password and Yubikey.

[@paulkennedy4305]

@@AllThingsSecured In addition to executing your steps mentioned above - I just found out I should also 'turn off' text message forwarding on my phone. Glad I found you. Thanks.

[@talamakara]

Am I the only one that questions using a security feature which has 0 security controls? NFC has no security in it at all, so how do these prove they are still secure?

[@DominicVictoria]

I personally don't use Multi Device because it increases the attack surface area in two ways. 1 - Being in another server and has to sync once in a while, 2 - That's another device they can hack

[@lunadefuego6325]

Thanks for this very useful video. So if my main key is a Yubico, can the spare/s one/s be from another brand?

[@AllThingsSecured]

Sure, they can if you want to.

[@NathanShepard]

What if you loose your key? I am just looking into this and curious.

[@hombrenuevoacts1728]

Do the key manufacturers keep a copy of your key like ledger nano x has done?!

[@AndreaCTSmith]

I have a son I want to keep off of the internet when he is not being supervised. Is there any device enabling pc lockdown...as opposed to accounts?

[@t2dev]

Are you still required to provide a password IN ADDITION TO the Yubikey? Or is the Yubikey the only needed device to login?

[@Sherry-jx9hs]

Do you need a key for each computer or can you store more than one computer key on them. If you have 5 computers do you need 5 keys or will one key store all the device keys. I do use two factor on some things like banking but kinda would like a stronger way to lock things down. Is a password manager a good thing instead or use both BitWarden+2FA key Thanks :)

[@AllThingsSecured]

Two keys…one primary and one backup. They’ll work on all your devices.

[@boardgameguyboardgameguy9194]

What if they have remote desktop viewers on your laptop? Do they bypass the Yubikey?

[@thesral96]

Yubi Yubi!

[@AllThingsSecured]

😉👍

[@zeroAls]

🐶🐶🐶

[@jagleaso]

I’m going to give you a master class lol

[@AllThingsSecured]

Didn't like it?

[@georgepapadakisart534]

Why would Brave and Windows security pop-up when activating a YubiKey for the first time?

[@jhonmiler]

I LOVE YOUR IDIOMA XD

[@AllThingsSecured]

My what?

[@jhonmiler]

@@AllThingsSecured leanguaje, i not a professional in typen documents