Close
  • Latest News
  • Artificial Intelligence
  • Video
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Artificial Intelligence
  • Video
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Cybersecurity
    • Cybersecurity

    Yubico Advances Strong Authentication Security With YubiKey Series 5

    Written by

    Sean Michael Kerner
    Published September 24, 2018
    Share
    Facebook
    Twitter
    Linkedin

      eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.

      Yubico announced its 5 Series security keys on Sept. 24, providing organizations with enhanced hardware to improve authentication security.

      Yubico develops a hardware-based authentication device known as the YubiKey, which provides support for different authentication protocols. Organizations can use YubiKeys to enable different types of multifactor authentication and password-less authentication approaches.

      “Our new YubiKey 5 Series is comprised of four different form factors and are multiprotocol security keys,” Jerrod Chong, senior vice president of product at Yubico, told eWEEK.

      The YubiKey Series 5 includes the YubiKey 5 NFC, YubiKey 5C, YubiKey 5 Nano and YubiKey 5C Nano. Each device includes the protocols included in the YubiKey 4 series: FIDO U2F, PIV (smart card), OpenPGP, Yubico OTP, OATH-TOTP, OATH-HOTP and challenge-response, he said. 

      “What is added are two new features: FIDO2/WebAuthn on all of the devices and NFC [near-field communication] on the USB-A keychain design,” Chong said. “For users familiar with our products, our YubiKey 5 NFC is the best combination of our YubiKey 4, YubiKey NEO and security key.”

      The FIDO (Fast Identity Online) Alliance is a group that develops strong authentication protocols for MFA. The 1.0 version of the FIDO specifications were published in 2014, and FIDO has since updated to FIDO2, which is also being adopted as part of the W3C’s WebAuthn authentication standard that is currently in the process of being finalized. Chong said that WebAuthn-supported browsers include Chrome and Firefox by default, and it is also supported in Microsoft Edge in build 17723 on Windows Insider.  

      “We anticipate several keys announcements in the near future about services supporting FIDO2,” Chong said.

      NFC

      NFC enables a tap-and-go type of authentication, such that user doesn’t always need to enter a username and password to get access to service.

      “With YubiKey 5 NFC, we now can enable all use cases for the various authentication protocols over NFC including FIDO2,” Chong said. “YubiKey 5 NFC supports U2F [Universal 2nd Factor] over NFC on Android devices using Google services. We will soon also support WebAuthn over NFC on Windows 10 devices for the FIDO2 tap-and-go experience.”

      Chong added that iOS devices that cannot support FIDO U2F or FIDO2 over NFC at this time can still use YubiKey 5 NFC in OTP (One Time Password) mode over NFC for authentication, such as Lastpass for iOS.

      Password-less

      While YubiKeys have typically been considered for use as part of an MFA approach, they can also be used for single-factor authentication, requiring no username or password to log in to a supported service (password-less). 

      “FIDO2 is the first open authentication protocol that can take tap-and-go authentication to the masses. Many existing tap-and-go solutions are proprietary and based on weak static credentials,” Chong said. “Strong single-factor authentication using public key cryptography sets a new bar for quick and easy authentication with significantly higher security, deployability and productivity.”

      Additionally, Chong said YubiKey Series 5 can be used in conjunction with a PIN for user verification, which the user would be able to set themselves for that YubiKey (touch + PIN).  In that scenario, the PIN unlocks the YubiKey locally and touch is still required for the YubiKey to perform the authentication. That PIN provides the high assurance by requiring that second step to unlock the YubiKey when logging in.  

      Security Key Usage

      Yubico has found success with its YubiKey in many different types of deployments around the world. In 2014, CERN, the European Organization for Nuclear Research, announced that it was using YubiKey technology to help secure access to its applications. Facebook, GitHub and Google have also been users of Yubico security key technology.

      In 2016, Google published a study based on two years of security key usage and found that the technology helped to improve security. In 2018, Google announced that it was building and selling its own security key called Titan, which is now a rival to Yubico’s YubiKey.

      Chong said that Google’s Titan security key currently supports FIDO’s U2F protocol, which can help users securely access Gmail, Dropbox and Twitter, among other services. In contrast, he noted that the YubiKey 5 Series supports a wider range of strong authentication protocols, including FIDO2, FIDO U2F, PIV (smart card), OpenPGP, Yubico OTP, OATH-TOTP, OATH-HOTP and challenge-response, in a single device over both USB-A and NFC (keychain design), as well as in USB-C form factors.  

      Alongside the Series 5 update, Yubico has updated its software tools that help organizations manage the keys. Looking forward, Chong said Yubico is always looking for ways to innovate and introduce its technology to new markets and use cases.

      Sean Michael Kerner is a senior editor at eWEEK and InternetNews.com. Follow him on Twitter @TechJournalist.

      Sean Michael Kerner
      Sean Michael Kerner
      Sean Michael Kerner is an Internet consultant, strategist, and writer for several leading IT business web sites.

      Get the Free Newsletter!

      Subscribe to Daily Tech Insider for top news, trends & analysis

      Get the Free Newsletter!

      Subscribe to Daily Tech Insider for top news, trends & analysis

      MOST POPULAR ARTICLES

      Artificial Intelligence

      9 Best AI 3D Generators You Need...

      Sam Rinko - June 25, 2024 0
      AI 3D Generators are powerful tools for many different industries. Discover the best AI 3D Generators, and learn which is best for your specific use case.
      Read more
      Cloud

      RingCentral Expands Its Collaboration Platform

      Zeus Kerravala - November 22, 2023 0
      RingCentral adds AI-enabled contact center and hybrid event products to its suite of collaboration services.
      Read more
      Artificial Intelligence

      8 Best AI Data Analytics Software &...

      Aminu Abdullahi - January 18, 2024 0
      Learn the top AI data analytics software to use. Compare AI data analytics solutions & features to make the best choice for your business.
      Read more
      Latest News

      Zeus Kerravala on Networking: Multicloud, 5G, and...

      James Maguire - December 16, 2022 0
      I spoke with Zeus Kerravala, industry analyst at ZK Research, about the rapid changes in enterprise networking, as tech advances and digital transformation prompt...
      Read more
      Video

      Datadog President Amit Agarwal on Trends in...

      James Maguire - November 11, 2022 0
      I spoke with Amit Agarwal, President of Datadog, about infrastructure observability, from current trends to key challenges to the future of this rapidly growing...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2024 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×