Do This Now! Yubikey + Google U2F Setup - EASY!

U2F or Universal 2nd Factor authentication is practically phish proof - it's the best available option for locking down your Google account (and other accounts as well!).

In this video I show just how easy it is to lock down your Google account with U2F using a Yubikey hardware security key. If you don't have one - you should!

Time codes:

00:00 Intro
00:13 U2F vs. OTP and other types of two-factor authentication
01:05 Getting Started with U2F Setup on your Google Account
01:48 Step 1 - Log into Google
02:08 Step 2 - Navigate to Security Settings
02:22 Step 3 - Add your U2F Security Keys to your Google Account
04:26 Step 4 - Add more U2F Security keys to your Google Account!
05:49 Step 5 - Get your Backup Codes
06:57 Logging into Google with your U2F Security Key
07:34 Logging into Google on your Mobile Device with your U2F Security Key

--------------------------

Follow me on:

Connect with Chris:

#yubikey #security #2fa #u2f

[eddielegs]

Finally someone who explains and shows clearly.

Many channels lot of fuss and not proper explanation. Thanks for that. Gtz

[Weaverx]

you make some pretty niche content but its valuable to those who deliberately search for it, keep it up

[drescherjm]

I purchased my Yubikey last week. The initial reaction was a lot of frustration (even as software engineer with 26 years of work experience) as many of my most important sites (financial ...) would not use it or prevented me from accessing my security settings from home (microsoft office 356 from work). I did get two of my important accounts setup and that is very helpful as I don't always have my smartphone within arms reach. I am watching these videos to learn about the features and to enable more accounts when possible. Since I have only 1 key at the moment I prefer to have an option for a second form of 2fa to an authenticator app in addition to the key.

[robdavy]

That flashback shot to 2020 was striking! Such a different visual look!

[bonareal]

Respect and reverence (in Russian uvazuha) to you for this informative video!

[simonfesting]

Everything looks different in my Google account. A very frustrating experience to add a Yubikey. It all seemed to be mixed in with passkeys now. And when I tried to add a second Yubikey, It only gave me the option to do so as a passkey. Can we have an up-to-date explanation of all of this please?

[pachjo]

I did this last year because people keep trying to break into my Gmail account for some reason and my Microsoft account. This pretty much put a stop to it especially my Gmail because my account is an original beta account and is very old, I think people want my alias for Gmail.

[beto]

My Google account has an existing Yubikey registered and now I want to add a second key, but it seems Google changed the settings now it says "Passkeys and security keys" and it shows the existing security key but only shows the option to create 'Passkeys' not to add an additional security key. Is it still possible add security keys at Google?

[Yves_Cools]

Excellent tutorial video, Chris !!! I would love to see some more to cover other online services (email and others) that can use these security keys. 🙂🙂🙂

[MikeHarris]

Apple finally added NFC for Yubikey in 2019, and Android had it for years.... I was at Gartner IAM in Vegas in a meeting with yubico execs to bring them into my company as a security key provider when apple announced it. Everyone jumped up and celebrated over the news. Until then, Apple ONLY allowed NFC to be used with APPLE devices. I believe whole heartedly in FIDO and U2F and pushed to bring them into my company I work for as a Sr Lead Cyber Security Architect/Manager and was able to succeed. I use my Yubikey for all my accounts security and paired with LastPass where my Yubikey is the key to unlock my vault too where i have thousands of accounts stored and extremely secure passwords that I rotate every 90 days.... Not letting anyone in my world.

[Samuel]

2:20 it defaults to Google authenticator and has no other options listed.

[lin_m]

Very clear, step-by-step instruction. Thank you.

[markarca]

I am set on using hardware keys (also removing mobile numbers in ALL of my online accounts) because the Philippine government (I am currently living in the Philippines) recently enacted mandatory registration of prepaid SIM cards.

[NicoBille]

Or better don't use google services and secure other services with it.
...ok, that makes no sense to write this on youtube ;-D
Good advice and thanks for all the good videos. Watching since years, but I think i never wrote a comment.
What I really appreciate is that you do follow ups for many things!

[tomstechnews]

Hey Chris! Great and useful video to increase security by Yubikeys. Got my pair yesterday! Will follow your steps! Thanks and please produce more interesting vids ! 👍💪

[LionRoars]

The only problem is with the Google id/pwd you can disable 2FA. It is a huge vulnerability. They should require the key to be touched before allowing it to be disabled.

[dude]

I'm trying to find out if the "flipper zero" can emulate a yubikey (as i heard the flipper zero can copy and emulate any thing that uses wifi bluetooth or nfc) and let someone use the flipper zero to access your yubikey locked account

[dudeh]

Curious how you use three different Yubikeys. I understand the best practice of primary and backup, but how do you use three in your daily life?

I've put off moving from TOTP 2FA to U2F forever; thanks for the video to get me to finally order them.

[joellemorris]

thanks a lot for this great video!!
But what about in the context of an office, I have multiple persons (let's say 4 in this example) wanting to sign in to a Google account from their office devices (6 laptops, 2 desktops, 1 tablet, 8 phones), how should I buy 4 Yubikeys and then register them in Google?

[wildflower]

I don't seem to have option to add other YubiKey. I don't have "+ Add security key" as a option under the key I have already set up. Please help