How to login to Windows with a YubiKey

Рет қаралды 57,530

Күн бұрын

In this video I show you how to use a Yubikey to login to windows as a second method of authentication in addition to your username and password.
You can purchase a YubiKey from the websites below or directly from Yubico
www.misco.co.u...
www.yubico.com...
amzn.to/3QUAmfk
#securitykey
#yubico
#yubikey
#2fa
#authenticator
#windows
#login

Пікірлер: 86

@GKW25308 Жыл бұрын

Very well explained. I've been looking for hours for the right info. You explained it better than anyone else. I nearly bought the bio version as I thought that's what I needed. Thanks so much, you saved me from buying the wrong key at twice the price. Subbed.

@MrTimTech2022 Жыл бұрын

Hey @sim1969 - Thanks so much for your coment and kind words, glad you found it useful and it was easy to follow. I'm planning on doing an 'updated version' video soon, so lets hope I can make it as helpful and easy to follow as this version. Thanks so much for subscribing 👍❤️

@NITROUSOXIDE921 5 ай бұрын

great explanation - you were able to explain it much more simply than anyone else ive seen. Thanks Mr Tim!

@MrTimTech2022 5 ай бұрын

Thanks very much Nitrousoxide921 - You're feedback is very much appreciated

@TimboSlice083 3 ай бұрын

I was zoning out a little while watching the video. I see "Configuring User: Tim" and my heart skipped a beat. lol.

@MrTimTech2022 3 ай бұрын

@TimboSlice083 - Ha ha, you see it was personalised for you 😉

@gwmaschke Жыл бұрын

It would have been good to note at the beginning that this only works with local accounts, not with Microsoft accounts.

@MrTimTech2022 Жыл бұрын

Hi George, Thanks for the constructive feedback. I agree I should have mentioned this when I produced the video but didn't realise at the time. Thanks for picking up on this!

@thegreatcerebral 24 күн бұрын

Question for you... Do you know if it is possible to manage/do with on-prem AD?

@gwmaschke 24 күн бұрын

@@thegreatcerebral I'm afraid I don't know the answer to that.

@Joel-if2bg 10 ай бұрын

Nice work. will be great when personal/local accounts can sign in with just the YubiKey PIN like with Microsoft Entra ID.

@MrTimTech2022 10 ай бұрын

Yes, definitely, I agree. I'm sure it will be available in the future on Windows.

@DJPON369 Жыл бұрын

Thank you for the effort and information

@MrTimTech2022 Жыл бұрын

My pleasure

@estebangalvan1926 Жыл бұрын

Very helpful video, Tim. I have a question, though. How can I configure a user on my PC? When I click the NEXT button, the page is blank.

@MrTimTech2022 Жыл бұрын

Thanks Esteban, appreciate your support and comment. I am presuming you need to setup a new Windows User Account in which case I find it easier to just perform a right mouse click on the Start Menu and select Run, when the Run box appears type in 'Control Panel' (without ' ') then press Enter, when window appears just select 'User Accounts' and then 'Manage another account' then select 'Add a new user in PC settings'. When the new window appears select 'Add Account' and select 'I don't have this persons sign-in information' then you can just create a new user by following the prompts or you can select 'Add a user without a Microsoft Account' if you only want to create a local user without a Microsoft online account. Hope this helps!

@DougForce Жыл бұрын

Useful information, thanks!

@MrTimTech2022 Жыл бұрын

Hey Doug, Thank you so much for your kind feedback. Glad you liked the vid, please do stay tuned for more videos soon which I hope you will also find helpful.

@embracegreatnessfrance 8 ай бұрын

You have to set up a local windows account to make it work fi

@MrTimTech2022 8 ай бұрын

Yes, you can only use this with 'Local' user accounts.

@slawomirszymanski5208 Жыл бұрын

Useful information 👍 thanks!

@MrTimTech2022 Жыл бұрын

@Slawomir Szymanski - Thanks so much, appreciate your kind feedback.

@ihavenoname.4929 6 ай бұрын

I set up my Yubikey for Windows 11 signins, but I can also still sign in usual normal means too, this is just added as yet another sign in option to my already existent hello pin. Any tips to restrict W11 login to strictly the Yubikey for my username credential?

@MrTimTech2022 6 ай бұрын

The Yubikey is used as an additional level of security for logging in, in addition to your username & password entry, for example. So you would use the Yubikey in addition & in combination with your PIN.

@user-rk9jq9pq3i 8 ай бұрын

Your videos are great. However, I don't clearly understand the difference between the Challenge/Response Secret items. Could you explain it more clearly to me, please? Thank you very much.

@MrTimTech2022 8 ай бұрын

Hi. It might be worthwhile you reading on the Yubikey website about what Challenge Response is all about as it's too much for me to really explain in a comment. I would do some research, however I've extracted this from the Yubikey website which might explain it briefly for you :- Challenge-response The other OTP application configurations (Yubico OTP, OATH HOTP, and static password) require the user to activate the configured slot (by touching the YubiKey or scanning it with an NFC reader) in order to generate and submit the password from the YubiKey to a host device. Challenge-response, on the other hand, begins with a “challenge” that a host sends to the YubiKey. The YubiKey receives the challenge (as a byte array) and “responds” by encrypting or digesting (hashing) the challenge with a stored secret key and sending it back to the host for authentication. Challenge-response is flexible. It can be used in single and multi-factor authentication for logging into applications or devices, and validation can take place on a host device itself or on a validation server on an internal or external network. The SDK supports all of these scenarios. Thanks for your comment and thank you for your kind appreciation of my videos and I hope the above helps!

@user-rk9jq9pq3i 8 ай бұрын

@@MrTimTech2022 Thank you for your help 👍👍

@MrTimTech2022 8 ай бұрын

You're welcome👍

@Seabr0ok 10 ай бұрын

Hey Tim, thanks for the tutorial! I was wondering do you reckon you'll be able to one day windows login via Yubikey with a microsoft account (not as a local account)?

@MrTimTech2022 10 ай бұрын

Hey @Seabr0ok - Thanks, appreciate that and thanks for your comment. I would like to think so, seeing as a lot of companies are now applying various additional security measures to login credentials, so you would think and hope that Yubico and Microsoft would work together to enhance things so that you can login with a Microsoft account. I guess in the interim you could create an additional 'local user' account in addition to your Microsoft one and then copy and paste the profile (possibly - I haven't tried it) so that both user accounts have the same settings in windows. I will certainly keep my eyes open for any enhancements and then produce an updated video with a how to.

@user-wg7jc9vo4y 10 күн бұрын

Is it possible to connect to a local Windows session without entering any User or Password?? just using the Yubi key?

@MrTimTech2022 10 күн бұрын

I believe not. As far as I know you have to use it in conjuction with a Username & Password.

@LastBlackViolin Жыл бұрын

Windows 11 now supports native security key login. Just an FYI to anyone reading. 👍

@MrTimTech2022 Жыл бұрын

Thanks Ty, very useful and good to hear.

@tfr 11 ай бұрын

How do I do this? It just gives me a Reset and Change Pin option whenever I try in my Sign-In settings on windows 11

@Vswagat 11 ай бұрын

❤

@MrTimTech2022 11 ай бұрын

Check to see if you're running a windows 'local account' and not a 'microsoft online account'. You need a 'local account' to use a Yubikey to login to Windows.

@makzi247 7 ай бұрын

Thanks for the useful video How do i use yubikey 5 in pc connected to domain? Do i need to install it on the server? Please help

@st.josephsparishtakapuna1433 4 ай бұрын

Hello Tim thank you for this tutorial. But may you help me please? I got as far as the yubikey login part but then when i would put in my windows username and password it says no credential or some sort of it. what could have gone wrong? thanks

@MrTimTech2022 4 ай бұрын

Hi Joseph, you're welcome. I've never come across that message before. Are you trying to use it with a Microsoft 'Online' account and not a local account ? it will only work with local accounts.

@panrejestrator2377 6 ай бұрын

I've installed Yubikey login for Windows 10 and I still login using regular Windows login/password (I'm selecing my username on login screen)... no need to insert key... what I'm missing ?

@MrTimTech2022 6 ай бұрын

There must be something you are doing wrong as it would request the Yubikey for logging in, did you select your username correctly when setting it up ? You are using it with a 'Local' account aren't you ? It will not work with a Microsoft Online account!

@L4d31r4 5 ай бұрын

I saw that it is possible to use Yubikey to access Windows (offline user only). The question is: what about access to HD? In this case, with more advanced techniques, they would be able to obtain the data from the independent HD, right?

@MrTimTech2022 5 ай бұрын

Maybe/maybe not. I guess research will tell you, let us know what you're research finds, be great for our community to know

@L4d31r4 5 ай бұрын

Hello friend. For my research (a normal user), i found that the best way to ppl dont acess your HD data is to use veracrypt correctly. So, best is use Yubikey to acess windows offline (or dont use windows and use linux for example) and veracrypt. Hugs from Brazil@@MrTimTech2022

@carmenmoore6791 Жыл бұрын

Hi. After following your instructions on the next steps, which allows you to place my name, and instead of next, it says skip. Need help

@MrTimTech2022 Жыл бұрын

Did you firstly install Yubico Login as the 'Windows Administrator' ? Right clicking on the Yubico Login and select install as 'Administrator'. You also have to make sure that you are using a 'local' user account and not an online user account linked to Microsoft, you should create a 'local user account' under Microsoft Windows. Try and check the above and see how you get on.

@jessearonms 9 ай бұрын

Without the Yubi it won't let you access the computer at all? Not even Guest account?

@MrTimTech2022 9 ай бұрын

I believe it should, maybe you've set up something incorrectly. I haven't come across this myself to be honest. Have you checked Yubikey website help section ?

@fbifido2 Жыл бұрын

@11:23 - it did not ask for you to press or touch the YubiKey ?

@MrTimTech2022 Жыл бұрын

You have to enable that option in the Yubikey application.

@bigbear3166 Жыл бұрын

so if i uninstall the yubikey login program from my PC will that remove the need to login with my key plugged in?

@MrTimTech2022 Жыл бұрын

Hi @bigbear3166 - Thanks for your comment. Yes I can confirm from testing and experience that once your logged in using your Yubikey and you remove the Yubikey application when logged in with the same user account, that you will no longer be prompted to insert your Yubikey to login in future.

@miltiadisparcharidis2065 5 ай бұрын

To anyone new here, set the playback speed to 1.5

@MrTimTech2022 5 ай бұрын

The cheek of it 😃Yes you can of course set it to what speed you like, however the video is done at a 'slow pace' so that it's easy to follow for novices as well !

@lmcst2821 11 ай бұрын

When I enter my login information it says invalid credential. Why?

@MrTimTech2022 11 ай бұрын

Have you made sure you are using a 'Local User' account and not a Microsoft Account ? The only thing I can think of is that you may well be entering a wrong username as normally it would just ask for a password before adding Yubikey options.

@ZekerThePigeon 10 ай бұрын

Where are you supposed to plug in the key on desktop? (Not laptop)

@MrTimTech2022 10 ай бұрын

You plug it in to a USB A socket on your desktop PC.

@OMGitsAFrEaKDuCk 10 ай бұрын

I have done these steps until I installed the Yubikey program. The problem is the program asked to reboot, and I didn't set the YubiKey... Now i cant login onto the PC. Any idea what I can do? I know my username and password but as its a company pc, it says I need to be in domain network, is there anyway I can overcome this?

@MrTimTech2022 10 ай бұрын

Oh gosh, have you tried other login methods on the login screen, I believe there's a recovery or alternative login option their ? I'm guessing you have, or maybe not. From memory I think there's an option whereby you can put in your Yubikey recovery keychain password which was generated when you set up the Yubikey and app, you should have noted down the recover/backup key ? As I haven't used this on a domain controller I wouldn't know but maybe IT support can assist ? Or on the Yubikey support website FAQ's or contact Yubikey support as a last resort ?

@OMGitsAFrEaKDuCk 9 ай бұрын

@@MrTimTech2022 i have tried so much, i had to take it to my company tech to help me out, and he had to login with the recovery code, and somehow at one point we managed to login and uninstall the yubikey. Headeache 🤣

@MrTimTech2022 9 ай бұрын

Glad you managed to sort out the issue between yourself and your tech company. Yes I recall also previously in the past uninstalling the Yubikey connection however for some reason it still didn't remove the Yubikey login option, albeit a secondary login procedure and which lukily I had kept the previous recovery code. Just a thought, keep the recovery code just in case you have any issues and in case it might not have TOTALLY removed the 2nd login option.

@madregular Жыл бұрын

the only user that popsup is defaultuser, but that's not my username? Why could this be

@MrTimTech2022 Жыл бұрын

Have you made sure that your using a 'local' user account and that it's not a microsoft online user account ? Click on 'Start' and open up 'Settings' then in the top left corner you should see your username and underneath that it needs to say 'Local Account'. You should be able to make it local (if it's not already) by opening up Accounts from the Settings menu and then change the settings to make it a local account.

@nqaiser 10 ай бұрын

Can you use Yubikey for Authenticating an RDP session with a windows host?

@MrTimTech2022 10 ай бұрын

Unfortunately not, it only works with local user/machine access and not RDP sessions.

@epytaffskitchenstink Жыл бұрын

What happens if I need to log in from another computer to access One Drive?

@MrTimTech2022 Жыл бұрын

You won't need the Yubikey but should just be able to use your Microsoft credentials to access One Drive remotely, or just use a web browser to go to One Drive through that.

@ventsislavnedev8499 7 ай бұрын

Hey why my yubico key doesn't detect my account on my pc. Please help

@MrTimTech2022 7 ай бұрын

By any chance do you have a Microsoft 'Online' account ? You have to have a 'Local' account to be able to use this.

@rogersmith4926 8 ай бұрын

Hello i have a quastion, i have already google accounts secured on my yubikey, am i still able to use them when i configure the yubikey to login into my pc or are those datas lost, because this would be a not good situation for me? Thanks

@MrTimTech2022 8 ай бұрын

Hey @rogersmith4926 - Thanks for your comment/question. Most Yubikey's have 2 available programming slots on them (mine does anyway) so provided only 1 of those slots has been programmed with something else (in your case Google) then you should be able to use the other slot for Windows login. To check which slots on the Yubikey are not already in use, go to the Yubico website and click on Support and then download the 'YubiKey Personalization Tool'. Once you've downloaded that Tool and installed it, it should show you which slots on your Yubikey have already been programmed. Then you should know which slot you can use on your Yubikey for windows login. Hope this helps & Happy New Year to you.

@rogersmith4926 8 ай бұрын

@@MrTimTech2022 Thanks, happy new year