Everything to Know About Configuring & Purchasing the Yubikey

This is a comprehensive video for purchasing, configuring, implementing and finally repairing the Yubikey.

Recommended if you have a mix of ports including Apple devices

Help Support the channel Amazon Associates link:
Yubico FIDO Black Security Key NFC
Yubico FIDO Blue Security Key NFC
Yubico YubiKey 5C
Yubico - YubiKey 5C Nano
Yubico - YubiKey 5C NFC
Yubico YubiKey 5 NFC
Yubico YubiKey 5 Nano

We cover the basics of purchasing a key, installing the appropriate apps and configuring the key. We break the key multiple times and show you how to fix it. Service providers are inconsistently implementing FIDO2 and causing confusion for end users. Please give us your personal experience and let us know if you need help.

Time Codes
00:00 Intro Hardware Security Key
00:34 Where to Purchase
01:13 What Key to Select
03:22 Download Apps to Configure Key
04:01 Running the Apps
04:30 Yubikey Manager (YM) App Setup
05:05 App OTP Slot 2 Configuration Static Password
06:15 OTP OATH-HOTP Configuration
09:22 OTP Challenge Response Configuration
11:00 OTP Deleting Slot 1 Configuration
11:26 OTP Slot 1 Effect on TOTP Authentication App
12:04 OTP Slot 1 Effect on Previously Credentialed Services
12:59 OTP Slot 1 Reconfigured
14:49 App FIDO 2 PIN Setup
15:41 App FIDO2 Reset
16:16 FIDO2 Reset Effect on Previously Credentialed Services
17:33 FIDO2 Service Providers Implementation for Credentialed Services are Inconsistent
18:42 App PIV Configuration

**Start of Information Referenced in the video**
Generating Base32 Secret Key from Yubico in PowerShell
** Start of Commands**
Command 1
$RNG = [Security.Cryptography.RNGCryptoServiceProvider]::Create()

Command 2
[Byte[]]$x=1

Command 3

Command 4
$r
**End of Commands**

Type of Result:
$5DUPSRKGL4UKEBCH4VJWP4YMUIBHCMIZ5DUPSRKGL4UKEBCH4VJWP4YMUIBHCMIZ

HOTP- HMAC-based One Time Password Explainers

Challenge Response KeePass with Yubikey

Key Words Tags Description:
----------------------------------------------------------------------
Key Words:
HOTP, TOTP, OATH, Yubikey, PIV, FIDO2, U2F, 2FA, Yubikey challenge response, What does a Yubikey do, Can Yubikey be compromised, What happens if you lose your Yubikey, Yubikey 5 NFC, Yubikey Setup, Yubikey authenticator, Yubikey bio, Yubikey iPhone, how does Yubikey work, Yubikey Coinbase, Yubikey binance, Yubikey BitWarden, Yubikey passwordless, Yubikey review, How to set up YubiKeys, Yubikey online security, Yubikey complete getting started guide, which Yubikey is right for me, different YubiKeys available, hardware security keys,

[CyberMedics]

We have learned a lot from smart viewers, so appreciate the informed feedback. I was confused about the operation of slot 1 for OTP.


The FIDO2 spec allows for passwordless credentialing. Microsoft is one of the few service providers that have truly implemented this. All I have to do is authenticate the key with pin or biometrics. The rest of the services we tried (Yahoo/Gmail) are implementing FIDO U2F, because they require a password and the key for credentialing.

[mastercoria.com_]

You're de only one that explain the differences between all the stuff, no body on other videos i saw explain this very well as you. You got a new subscriber. Thank you

[marshythemellow]

Thanks for covering this, i thought I was going to just forget about my Yubikey until I finally searched for a video on it.

[Mike_Malloy]

Thanks for the informative demo. It helps understand a little bit more. The differences between the applications and Slot 1 vs Slot 2, what to use and where is still all pretty confusing.

[JohnSmith-zlrz]

valuable video! nobody explain that, only you!

[ImanIself]

I was seriously confused as to why different providers react differently. Very helpful vid!

[MsAJLUVAJ]

thanks for sharing...simpleng maybahay

[jairusjaysen]

Very informative, Thank you for sharing

[televisi]

Thanks for the video; helps me understanding yubikey management!

Also, thanks for the different hashing mechanism that each provider implement - it was confusing but I think it is clearer (tl;dr, just follow the instructions provided by YubiKey) and you'll be alright....right?

Also, do you need to change the PIN / PUK? or just leave it as default?

[lakbaypalaboy]

Its a great day, how are you, thank you for keep us updated on your daily adventures and your daily activities, your friend is here for full support. Keep safe and stay connected.,

[niaxx]

Great video 👍 I have a question about the static password, as the key is a HID and act like a Keyboard.
Potentially the password could be caught by a keylogger right ?

[rlindbuechl]

Is anything speaking against using Static Password on Slot 1? Would this somehow affect the FIDO functionality on Slot1? How does Static password work on NFC?

[McpCosmO]

so i can/should uncheck PIV via the interface section if i dont use it?

[ac]

How could you access your account of you only have one key and it breaks or lost ?

[Zues]

Appreciate the content, thanks! I bought my two yubikeys. A question I have is can I use my yubikey as a static password AND 2FA at the same time so to speak. IAW, login with the static pasword then use the key for my Yubicon autheniticator 2FA?

[sjzepher]

I have the yubikeys 5 nfc. I gather this video geared for ms/windows an did hear anything regarding android. 1. One must introduce use of yubi on NEW pc on FIRST ligin to ms account? 2. This yubi works with ANY authentucatir app ? Do you use the yubico authenticatir app or bitwarden? Does Google authenticator app work with yubi on pc ir android? Thanks

[thegrayman]

PLEASE SIR MAKE ONE MORE VIDEO RELATED TO YUBI KEY MANAGER AND SETTINGS ON DEEPER LEVEL THEN THIS AND MAKE IT EASY FOR NORMAL PEOPLE TO UNDERSTAND, THANK YOU SIR

[sakutube]

Thank you for this video. I have been trying to figure out my Yubikey for over 2+ years now! you have helped me a LOT.

Here is a suggestion for a new video showing the process of how to use the Yubikey with gnupgp4win. this is a subject that is not covered clearly on YouTube.

thanks

[fbppuol]

EXUSE ME SIR WILL I NEED TO DO ALL THIS FOR A BACKUP YUBI KEY TO THANKS

[kianostad]

You are confusing OTP and FIDO2. they are two different things, in the case of yahoo you are using FIDO2 thats why you can login even if you are change the OTP and same goes for bitwarden too ( you reset the FIDO not ther OTP so bitwarden let you login )