You can now log in to Windows devices using Yubico's security keys

[midian182]

In a nutshell: In an age where more people are falling victim to hackers, hardware security keys are becoming increasingly popular. Now, Swedish company Yubico is allowing people to log in to local Windows OS accounts using one of its USB devices.

Yubico’s keys are already used to protect Gmail, Dropbox, password managers and more, and can also be used to log into Mac and Linux machines. After six months of testing, the firm has now released a stable version of the Yubico Login for Windows Application.

Yubico writes that the app is designed for individuals who have local accounts on Windows 7, Windows 8.1, or Windows 10 computers. After installation on a Windows machine, the Yubico key can be used as a second layer of authentication. Users will still need to type in their passwords, but they’ll also need to insert the USB key to complete the login process.

In addition to improving security, the application includes new core features, including enrollment for backup YubiKeys and lost YubiKey recovery mechanisms.

The app does not support local Windows accounts managed by Azure Active Directory (AAD) or Active Directory (AD).

Earlier this week, Google announced that it had worked with Yubico over the past year to develop a USB-C hardware key. Priced at $40, it’s compatible with Android, Chrome OS, macOS, and Windows devices and will be sold alongside existing USB-A / NFC and Bluetooth / NFC / USB Titan Security Key variants.

You can download the Yubico Windows app from the company’s website.

Permalink to story.

https://www.techspot.com/news/82402-you-can-now-log-windows-devices-using-yubico.html

 

[branhama]

I like how the guy in what appears to be a public location locks his laptop and places his Yubi key on top of the laptop and walks away. Excellent security video there guys!

 

[netman]

Another life complicating device...! If your PC does not start after the key insertion how would you troubleshoot the source of the problem?!

 

[Silvernine]

Another life complicating device...! If your PC does not start after the key insertion how would you troubleshoot the source of the problem?!

Security is always a compromise between convenience and security. Anyways, in this case, you should have a backup key. And in worse luck, better make sure you backup your data because you ain't getting it from this computer (and in theory, no one else either if you also encrypted the drive).

 

[wiyosaya]

I wonder how long it will take until someone figures out how to clone these keys. Any hardware-level function calls that the developers might be using and might thwart disk cloning software are certainly available to other developers.

 

[Dennis83]

I like how the guy in what appears to be a public location locks his laptop and places his Yubi key on top of the laptop and walks away. Excellent security video there guys!

Yeah, normally you need biometric authentication data or a pin/pass to unlock the yubikey, otherwise it would not be very secure.