Pages:
Author

Topic: [Hands On]Yubikey - Help secure your digital assets - Including Blockchain.info (Read 3514 times)

legendary
Activity: 1456
Merit: 1000
If the yubikey is lost or misplace. How can a user get all the passcode and data saved on the yubikey?

Sorry for how long it took saw this today.  It depends on the service you are using.   Most you would have to go through some sort of support for example here is dropbox - https://www.yubico.com/why-yubico/for-individuals/dropbox-for-individuals/#secret

I suggest having backup options where available I personally like one's that allow multiple Yubikeys to be registered where I can keep one safe incase other is lost.  Some can use phone numbers, or google authenticator.  But again varies a lot depending on what service you use it on.
hero member
Activity: 1820
Merit: 566
If the yubikey is lost or misplace. How can a user get all the passcode and data saved on the yubikey?
legendary
Activity: 1456
Merit: 1000
how about price ?
any ebay link of this product?

You must have missed last part of hands on.   Click on the link: https://www.yubico.com/products/yubikey-hardware/

There are many different versions of it.  And the great thsing is you can pick which is best for you.  This could vary for each person.  I thought I would like one of the longer full Yubikey's.  But I ended up loving the nano version, it's fit with a laptop is just great.  But for everyone it could be different.

Not sure why you would want to get off eBay.  Go direct link I listed above and by direct from manufacture.  I just like buying direct on anything dealing with my security.

thank's for the link, yesterday i suggest some exchanger using yubikey feature
i hope someday exchanger increase his secure system

Not a problem It really is a good 2 factor device.  The more sites that use 2 factor the better.  Making a system where if even password is compromised does bad guy no good.... is great.

I suspect we will see more and more 2 factor.  But it's kinda hard to get all sites to add it as a lot of "normal" users think single password is enough.  They are just unaware.
newbie
Activity: 41
Merit: 0
how about price ?
any ebay link of this product?

You must have missed last part of hands on.   Click on the link: https://www.yubico.com/products/yubikey-hardware/

There are many different versions of it.  And the great thsing is you can pick which is best for you.  This could vary for each person.  I thought I would like one of the longer full Yubikey's.  But I ended up loving the nano version, it's fit with a laptop is just great.  But for everyone it could be different.

Not sure why you would want to get off eBay.  Go direct link I listed above and by direct from manufacture.  I just like buying direct on anything dealing with my security.

thank's for the link, yesterday i suggest some exchanger using yubikey feature
i hope someday exchanger increase his secure system
legendary
Activity: 1456
Merit: 1000
i want to ask, can i save something at yubikey? like notepad or link site?
i have idea to create new blockchain wallet without email,
like this https://blockchain.info/wallet/678a3341-c9df-452e-9cef-dde026fd1bc5 (password trialtrialtrial)

can i do it ?

I am using it in a mix with Lastpass as I really like it as a password manager.  With lastpass you get a "vault" where you can store notes even.  

So I have lastpass with storage of info and security of needing my master password, and my Yubikey.  And my Yubikey you must touch to send a code cannot be done remotely.  So it is pretty good for storage in my use.

http://lifehacker.com/lastpass-hacked-time-to-change-your-master-password-1711463571
https://blog.lastpass.com/2015/06/lastpass-security-notice.html/

are you sure with password manager ?  Undecided

That article is quite dated look at date, nothing new.    But yes I feel secure as I use 2 factor.

And with Yubikey the great thing is even if they have masterpass does them 0 good.  They need the Yubikey.   So the 2 factor saves you once again.  If you use a password manager use 2 factor.  And I still highly suggest Yubikey.

So those with Yubikey's were in no risk essentially with the 2 factor on lastpass even then.
copper member
Activity: 1218
Merit: 1007
Post your ann & bounty just contact me
i want to ask, can i save something at yubikey? like notepad or link site?
i have idea to create new blockchain wallet without email,
like this https://blockchain.info/wallet/678a3341-c9df-452e-9cef-dde026fd1bc5 (password trialtrialtrial)

can i do it ?

I am using it in a mix with Lastpass as I really like it as a password manager.  With lastpass you get a "vault" where you can store notes even.   

So I have lastpass with storage of info and security of needing my master password, and my Yubikey.  And my Yubikey you must touch to send a code cannot be done remotely.  So it is pretty good for storage in my use.

http://lifehacker.com/lastpass-hacked-time-to-change-your-master-password-1711463571
https://blog.lastpass.com/2015/06/lastpass-security-notice.html/

are you sure with password manager ?  Undecided
legendary
Activity: 1456
Merit: 1000
Its a good idea. Even few countries have their own security wallet technology for securing their important documents as well all personal asset documents.

Physical token are getting more and more common.   Just great tools to add 2nd factor.   I wish all site's used 2nd factor it is truly a great jump in security. 

With 2fa you could have my password and does zero good without my Yubkey.  So add that security to a popular site like blockchain.info I think its great for the money.
legendary
Activity: 1456
Merit: 1000
i want to ask, can i save something at yubikey? like notepad or link site?
i have idea to create new blockchain wallet without email,
like this https://blockchain.info/wallet/678a3341-c9df-452e-9cef-dde026fd1bc5 (password trialtrialtrial)

can i do it ?

I am using it in a mix with Lastpass as I really like it as a password manager.  With lastpass you get a "vault" where you can store notes even.   

So I have lastpass with storage of info and security of needing my master password, and my Yubikey.  And my Yubikey you must touch to send a code cannot be done remotely.  So it is pretty good for storage in my use.
legendary
Activity: 3164
Merit: 1213
Its a good idea. Even few countries have their own security wallet technology for securing their important documents as well all personal asset documents.
copper member
Activity: 1218
Merit: 1007
Post your ann & bounty just contact me
i want to ask, can i save something at yubikey? like notepad or link site?
i have idea to create new blockchain wallet without email,
like this https://blockchain.info/wallet/678a3341-c9df-452e-9cef-dde026fd1bc5 (password trialtrialtrial)

can i do it ?
legendary
Activity: 1456
Merit: 1000
So... A yubikey is a physical second factor? This is actually quite a cool idea. How did you push out your product so widely? I haven't heard of it at all, but it's widely supported.

Correct.

It is made and promoted by a large Swedish company called Yubico. I do not think notlist3d is involved. Smiley

Correct I am just a fan of it.  I have been looking at hardware wallets and other way's to secure digital assets.  This was a product I liked.

I don't own part of company, stock, or involved in any way.   So I make zero off of sales.   I just really liked their quality products so tested it then shared it after I liked it so much.
legendary
Activity: 1456
Merit: 1000
So... A yubikey is a physical second factor? This is actually quite a cool idea. How did you push out your product so widely? I haven't heard of it at all, but it's widely supported.

They have done a great job of making  good  products.   They have had multiple generations even, so this got them noticed and put on some great sites as physical second factor.

I love the Yubikey nano for a laptop.  I cant stress how nice it is on 2 factor.  I can leave it in the usb slot and it barley sticks out, so it's not noticeable hardly at all.  But on the sites using it and Lastpass it takes me to press the Yubikey for it to send a key to log in, and it's a unique code it sends each time.

I feel more secure with it then SMS even. With SMS if you were really unlucky it could be forwarded if a good social engineer to another phone, or a phone could be compromised.  Both of these are not worries with Yubikey.

And it is great Blockchain uses it.   Gives you some more security on the most popular hot wallet out there.
full member
Activity: 172
Merit: 100
So... A yubikey is a physical second factor? This is actually quite a cool idea. How did you push out your product so widely? I haven't heard of it at all, but it's widely supported.

Correct.

It is made and promoted by a large Swedish company called Yubico. I do not think notlist3d is involved. Smiley
full member
Activity: 172
Merit: 100
Can I ask? Is this "Yubikey" a souped up version of Ledger's HW.1? It works with more than just a few bitcoin wallets, has NFC support, and looks less flimsy?

No. Yubikey is a one time password generator. It has nothing to do with bitcoin, other than some online wallets lets you use it to protect your account, like they also lets you use Google Authenticator, or one time passwords delivered by SMS.

And I should be clear I'm  not telling people not to get hardware wallets, I'm a strong supporter of them.    They are a great option to use.

I am doing this thread as I think password security for a lot could be greatly secured with Yubikey and software, or 2nd factor log-ins.  Also blockchain is the number one mentioned hotwallet online, and I think Yubikey is great to use as 2nd factor.  So even if your blockchain password is taken they could not log in without your Yubikey.

I agree. Hardware wallets are great. And IMHO the best choice for any bigger amount of bitcoins.
As long as you use an online wallet, you should protect them with 2FA. So I totally agree with you, the Yubikey is a great choice for that.
Maybe my previous post was a bit unclear about that.
legendary
Activity: 1232
Merit: 1029
give me your cryptos
So... A yubikey is a physical second factor? This is actually quite a cool idea. How did you push out your product so widely? I haven't heard of it at all, but it's widely supported.
legendary
Activity: 1456
Merit: 1000
Can I ask? Is this "Yubikey" a souped up version of Ledger's HW.1? It works with more than just a few bitcoin wallets, has NFC support, and looks less flimsy?

No. Yubikey is a one time password generator. It has nothing to do with bitcoin, other than some online wallets lets you use it to protect your account, like they also lets you use Google Authenticator, or one time passwords delivered by SMS.

And I should be clear I'm  not telling people not to get hardware wallets, I'm a strong supporter of them.    They are a great option to use.

I am doing this thread as I think password security for a lot could be greatly secured with Yubikey and software, or 2nd factor log-ins.  Also blockchain is the number one mentioned hotwallet online, and I think Yubikey is great to use as 2nd factor.  So even if your blockchain password is taken they could not log in without your Yubikey.
legendary
Activity: 1456
Merit: 1000
..snip...
I think Lastpass is pretty good.  There was one exploit for Lastpass they named Lostpass you just need to make sure your signing into your Lastpass and not a phishing site.  Which you really should always check that when logging into a password manger.  And having two factor with Yubikey does help on most possible security problems tremendously.

Just to make sure you know what I was talking about Smiley I don't think LastPass is a bad choice, but it's always good to know:

https://nakedsecurity.sophos.com/2015/06/16/bad-news-lastpass-breached-good-news-you-should-be-ok/
https://paul.reviews/privacy-password-managers-a-reality-check/
https://forums.lastpass.com/viewtopic.php?f=12&t=187485

I'm not debating your knowlege, it is true what your saying.   Also people should realize I picked Lastpass as I liked it.  There are many different password managers you can pick your favorite.

And even if say your master password is stolen the great thing with Yubikey attached, is without it they can't even access your stored info.  So that second factor authentication is important.
full member
Activity: 172
Merit: 100
..snip...
I think Lastpass is pretty good.  There was one exploit for Lastpass they named Lostpass you just need to make sure your signing into your Lastpass and not a phishing site.  Which you really should always check that when logging into a password manger.  And having two factor with Yubikey does help on most possible security problems tremendously.

Just to make sure you know what I was talking about Smiley I don't think LastPass is a bad choice, but it's always good to know:

https://nakedsecurity.sophos.com/2015/06/16/bad-news-lastpass-breached-good-news-you-should-be-ok/
https://paul.reviews/privacy-password-managers-a-reality-check/
https://forums.lastpass.com/viewtopic.php?f=12&t=187485
full member
Activity: 172
Merit: 100
Can I ask? Is this "Yubikey" a souped up version of Ledger's HW.1? It works with more than just a few bitcoin wallets, has NFC support, and looks less flimsy?

No. Yubikey is a one time password generator. It has nothing to do with bitcoin, other than some online wallets lets you use it to protect your account, like they also lets you use Google Authenticator, or one time passwords delivered by SMS.
legendary
Activity: 1456
Merit: 1000
Can I ask? Is this "Yubikey" a souped up version of Ledger's HW.1? It works with more than just a few bitcoin wallets, has NFC support, and looks less flimsy?

Completely different things.   A Ledger is a bitcoin wallet, it stores your bitcoin wallet on it and signs the transactions.   There are many different ones but they are hardware wallets.

Yubikey is a physical security key.  So it's not a hardware wallet but a security token.  It can be used on some hot wallets like blockchain.info .  And it really gives the extra option of adding security by using it as a 2nd factor authentication on many sites.   

And where it really get's even extra great options is when combining with password managers.  It gives secure 2 factor on it, and if you use lastpass you use a unique password for every site so if one site was hacked not all your passwords are compromised from using same password on multiple sites.
Pages:
Jump to: