STOP USING 2-Factor Authentication!

2-Factor Authentication is flawed! Here's why you should stop using it and start using security keys instead.

Connect with me:

0:00 - STOP Using 2-Factor Authentication!
0:29 - How 2-Factor Authentication Works
0:56 - The Problem With 2FA
2:58 - Why Security Keys Fix Every Problem
5:17 - The MOST Important Security Measure
6:45 - Comparing Security Keys
7:02 - Google Titan Security Keys
8:28 - Yubikeys
11:34 - My Preferred Security Key

Affiliate link disclosure: most of my videos include affiliate links in the description. When you click an affiliate link, I may receive a commission for any products or services you purchase through that link. It doesn't cost you anything extra, and in some cases, you may receive a discount through my links. All my opinions are 100% honest, and you are welcome to purchase things by finding them on your browser instead of my links. Thank you for supporting the channel!

[StreetPhotographyChina]

This is a great video, but the title is misleading as security keys are one type of 2-factor authentication and people should never stop using 2-factor authentication, they should just switch from SMS and email to more secure types of 2FA.

[Stray]

The title is very misleading or just wrong. You're arguing to stop using specific 2FA methods and to use a different 2FA method instead. Not to stop using 2FA altogether.

[lumenzilla]

A hardware key is also a 2-Factor Authentication method, no?

[itsmisterchris]

One password has all passwords sowhere in a cloud that u have no control over...if that gets hacked thn they got all your passwords...or better yet what if a employee tries to dig in a persons to get .Password manger is stupid in my opinion..your giving others your passwords

[MichaelSoulierPens]

Your click-bait title is misleading as using a physical key is still 2FA. Also, if you set up your apps properly you will not be locked out of your account. Backup codes and multiple apps for redundancy are typically possible. Agreed that SMS is unsafe. That likely should have been the title of this video.

[Explorer_kc]

Just a news, Yubico has revised their Security Key line of keys to have black models from blue ones since 2023. So the keys sold by the company are all black now. The Security Key series differ from their YubiKey 5 series in that the former supports only FIDO protocols (and thus no OTPs or static passwords can be set to the keys). The back of the Security Key series have the word "FIDO" printed on them to distinguish the keys from other lines of products.

[electronicsmotovlog]

my problem sir is using two factor authentication, result to log in problem on my Facebook account, because of two factor authentication

[AVR]

So i have a yubikey that i want to use on my hotmail but it only gives me the option to use a security key at login. A hacker can still get in with username and password and the registered security key is never requested unlike the way it can be used with gmail. I also dont want to, use microsoft authenticator as i want to use the yubikey authenticator app. Any suggestions for a workaround?

[mh]

If using normal 2FA I can set in lots of apps on my mobile phone since I activated it I am never asked to actively log in using these authenticators/ filling in the 6 numbers. Only when I login in a complete new browser/device, I am asked to do so. I like this behaviour because I dont want that I have to use or fill in codes whenever opening an app on my phone, even once a day would be absolutely time-wasting. So the big question is: When I use a Yubi-Key, will I get the same option /behaviour like above? Can I configure like this? Or do I really need to authenticate every day or every single time I open Facebook, Youtube, Instagram? Because I open these apps every some minutes in free time. I only want to prevent that my account is accessed from a completely unknown device / different country...

[tysonbeighss]

When I think of 2FA I automatically think of insecure SMS, which shouldn't be used in this capacity. So the title works for me. Good video comparing the security keys, thanks for making it!

[joebuck]

Michael Jordan air gapped defenders with his fade away jumper.

[scarbus]

I think you are *** and give bad advice. Klick bait title to make some bucks but in process you destroys 7200 (current count) users. Hardware protect is better then authentication app but your title says "STOP USING...". People like you polluting this beautiful thing that we all call Internet.

[abeefwellington]

This video should be more popular, it’s way more helpful than the others I watched. Nice work. Explaining the differences in the yubikeys was especially helpful.

[XDDM]

LOL. Spends entire video describing how dangerous it is to have passwords saved by a third party website. Proceeds to talk about sponsor of video that does just that.

[ymratobor]

DO NOT BUY THIS PRODUCT, unless you know EXACTLY how to use and install it! They offer NO SUPPORT whatsoever. Also, once you spend 50 or 60 bucks on this product, they highly recommend that you spend another 50 or 60 bucks on a spare. This is called bait and switch! This is a very unscrupulous company. Recommend not doing business with them!

[jaredluker]

A hardware key IS a second factor of authentication. Your title sucks.

[warwagon]

Clickbait title, the title is clickbait. The problem is finding sites that work with a security key. Yes, a lot of the big names do but what about the small ones?

[LionRoars]

The worst at security .. banks. I know.

[tacom]

I also like yubikey for static password feature(key can store 2, short press, and long press). Think, master password for a manager, obviously add something to that from memory and it's pretty legit in the end.

[adversary]

As another alternative to Google's Titan Key the GoTrust Idem Key c is the same price and supports fido2 rather than just Fido like Titan Key.