Yubikey to secure servers.. has anyone tried it?

[timconsidine]

@fbartels thank you !

[humptydumpty]

@jdaviescoates during the mess of figuring out how to get to that offer button, I created a new account and signed up for the offer just like you did. I received an email yesterday with the "decline" and telling me how to become eligible. The sad part is that I haven't received the coupon on my eligible account yet.

[humptydumpty]

Update: I received my coupon email earlier today.

The email came from (add it to your whitelist):

resources {{a.t.}} info [.d.0.t.] yubico [.d.0.t.] com

Congratulations! You are one step closer to activating phishing-resistant MFA with industry leading Yubico security keys at an exclusive 'good for the Internet' price.

Even better news! For a limited time, we're excited to surprise you with an upgrade to our multi-protocol YubiKey 5 Series!

You are now eligible to purchase up to 4 individual YubiKey 5 NFC or YubiKey 5C NFC (minimum 2) starting as low as $10 USD.  

Ready to get started with the YubiKey?
Here is your single-use coupon for up to four (4) YubiKey 5 NFC or YubiKey 5C NFC (minimum 2) keys for as low as $10 USD or €10 Euros at www.yubico.com

But there is more…. 

Looking to purchase more YubiKeys? YubiEnterprise Subscription provides flexible purchasing options of YubiKeys, predictable spend, premium support and a lower cost to entry.

Cloudflare customers with 500 or more users are eligible to receive an exclusive 50% discount off their first year of YubiEnterprise Subscription.

[BrutalBirdie]

I got my for Yubikeys today.

[humptydumpty]

@BrutalBirdie Nice! I got mine yesterday (a day ahead of estimated delivery). I just got around to setting mine up. Vaultwarden (webauthn method) works great. I tried to secure my laptop login (W11 Home on a local account) but it's still logging me in without the Yubikey. The drive isn't encrypted so that might have something to do with it. I read that Bitlocker is only available on the Pro version, not Home. I can use Drive Encryption instead but it's asking to log into a Microsoft account. It's days like these when I curse the devs of my work related software for not supporting Linux!

[humptydumpty]

How are you all carrying your Yubikey around?

[fbartels]

@humptydumpty i'm just carrying mine on my keychain. They are very robust. No problems so far with my 9+ years old key.

[BrutalBirdie]

Here is my workflow with yubikeys (from now on short yk).

I have three.

• 1x Mobile
• 1x Stationary
• 1x Backup

If a webpage offers FIDO support, great! But? Only 1 key? The site must have multi key support. Good examples are Github, Hetzner and may more.
A BAD Example is kraken.com! A Crypto trading platform which only supports ONE KEY!
I had a lengthy discussion with one of the support head members who promised me, multi keys will be available soon. The all known SOON.

If not, I use the TOTP feature from the yk.

This way I can always sync mobile and stationary and every quarter of the year I get my backup key from the bank vault and sync it as well.

This way I always a duo setup and 1x spare in case of absolute disaster.

I've been running this setup for quite some time and the vault key can be a bit annoying, but security over comfort.

[humptydumpty]

@BrutalBirdie said in Yubikey to secure servers.. has anyone tried it?:

1x Mobile
1x Stationary
1x Backup

I love the idea of having a stationary key. A Bio key attached to a USB extension cable hidden under the desk would be ideal for me

[humptydumpty]

Is anyone using a Yubikey to secure a Windows 11 local account?

I upgraded to Pro, activated Bitlocker, and only have user/pass option active for signing in (no PIN, Windows Hello, etc.). It still signs me in without inserting a Yubikey. This is maddening!

[BrutalBirdie]

@humptydumpty Windows no, my gaming windows only has password disk encryption but my linux has disk encryption 2fa support.

Sorry can't share anything on windows