Passwordless authentication is here: new Yubico FIDO2 key

https://www.yubico.com/2018/04/yubico-and-microsoft-introduce-passwordless-login/?source=me

by rdslw • 8 years ago

21 7 8 years ago

yubico.com

rconti2• 8 years ago

Can someone help me understand how this is different from the existing YubiKey products, which I've used?

* Passwordless single factor with AD integration (couldn't this already be done by storing your password on the key?)

* 2factor auth with the token as one of the factors.

From the article:

-----------

Single Factor: This only requires possession of the Security Key to log in, allowing for a passwordless tap-and-go experience.

Second-Factor: In a two-factor authentication scenario, such as the current Google and Facebook FIDO U2F implementations, the Security Key by Yubico is used as a strong second factor along with a username and password.

Multi-Factor: This allows the use of the Security Key by Yubico with an additional factor such as a PIN (instead of a password), to meet the high-assurance requirements of operations like financial transactions, or submitting a prescription.

freeone3000• 8 years ago

"Passwordless" single factor done by storing your password on the key isn't passwordless. You have a password. U2F replaces the password with a "bearer" authentication token - it's two-factor auth without the password, instead of a password-manager based approach.

The actual announcement in this blog post is Azure AD and Windows 10 integration, not anything new by Yubico.

bonestamp2• 8 years ago

In the "passwordless" scenario... if someone stole your yubikey, could they access anything you had authenticated it for?

eganist• 8 years ago

Legal wonks:

I know biometric identification isn't afforded the same protection by law on the basis that biometrics are public (e.g. fingerprints are left everywhere), but what about physical keys? FIDO2 is entirely analogous to a physical key, and it's not exactly public the way biomtrics are.

I'd still prefer a password for that added 5th amendment layer of protection, but I'm looking for what legal minds think about this right now.

cmurf• 8 years ago

This is what I want for family members: the end to passwords and the end to using Facebook (or even Google for that matter) to authenticate logins. I continue to lament the end of Mozilla Persona.

Passwordless authentication is here: new Yubico FIDO2 key

Related Stories