# ATG 21: How to Use Hardware Security Keys Like YubiKey for 2FA

**URL:** https://www.twit.community/t/atg-21-how-to-use-hardware-security-keys-like-yubikey-for-2fa/5308
**Category:** Ask The Tech Guy (vintage)
**Tags:** episode
**Created:** [January 13, 2020, 6:46pm UTC](https://www.twit.community/t/atg-21-how-to-use-hardware-security-keys-like-yubikey-for-2fa/5308 "2020-01-13T18:46:09Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![Leo](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/leo/32/16203_2.png) [@Leo](https://www.twit.community/u/Leo)
#### Post date: [January 13, 2020, 6:46pm UTC](https://www.twit.community/t/atg-21-how-to-use-hardware-security-keys-like-yubikey-for-2fa/5308/1 "2020-01-13T18:46:09Z")

</div>

Beep boop - this is a robot. A new show has been posted to TWiT…

> **[Ask The Tech Guy 21 How to Use Hardware Security Keys Like YubiKey for 2FA |...](https://twit.tv/shows/ask-the-tech-guy/episodes/21)**
>
> Leo explains how to protect your online accounts with Yubico's YubiKey and other hardware security keys for two-factor authentication.Get YubiKey: https://amzn.to/35UYfdD

What are your thoughts about today’s show? We’d love to hear from you!

---

<div class="post-metadata">

### Author: ![Gothelf](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/gothelf/32/4307_2.png) [@Gothelf](https://www.twit.community/u/Gothelf)
#### Post date: [January 13, 2020, 10:32pm UTC](https://www.twit.community/t/atg-21-how-to-use-hardware-security-keys-like-yubikey-for-2fa/5308/2 "2020-01-13T22:32:59Z")

</div>

Great info, thank you. Wishing my financial services would get on board with hardware security…

---

<div class="post-metadata">

### Author: ![PHolder](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/pholder/32/2439_2.png) [@PHolder](https://www.twit.community/u/PHolder)
#### Post date: [January 13, 2020, 10:40pm UTC](https://www.twit.community/t/atg-21-how-to-use-hardware-security-keys-like-yubikey-for-2fa/5308/3 "2020-01-13T22:40:06Z")

</div>

> [@Gothelf](#):
>
> hardware security

But we send a SMS to your [hardware] phone. /snark 😉

---

<div class="post-metadata">

### Author: ![tokyotony](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/tokyotony/32/86_2.png) [@tokyotony](https://www.twit.community/u/tokyotony)
#### Post date: [January 15, 2020, 6:42pm UTC](https://www.twit.community/t/atg-21-how-to-use-hardware-security-keys-like-yubikey-for-2fa/5308/4 "2020-01-15T18:42:22Z")

</div>

@leo and all… what do you all think about Google making the iPhone a physical security key using Bluetooth? Is that a reasonable substitute for a yubikey, albeit you have to use Chrome browser.

---

<div class="post-metadata">

### Author: ![MacPhyle](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/macphyle/32/75_2.png) [@MacPhyle](https://www.twit.community/u/MacPhyle)
#### Post date: [January 15, 2020, 7:29pm UTC](https://www.twit.community/t/atg-21-how-to-use-hardware-security-keys-like-yubikey-for-2fa/5308/5 "2020-01-15T19:29:02Z")

</div>

Ain’t that the truth. I once had a bank that, to get me back into my account, emailed me my password. I think Steve Gibson would call that “in clear text,” or something like that… Feel free to correct me. Anyway, I did send that bank a critical letter to some department. For their inattention plus other reasons, I’ve moved on from that bank.

---

<div class="post-metadata">

### Author: ![Pommster](https://sea2.discourse-cdn.com/flex020/user_avatar/www.twit.community/pommster/32/530_2.png) [@Pommster](https://www.twit.community/u/Pommster)
#### Post date: [January 15, 2020, 11:49pm UTC](https://www.twit.community/t/atg-21-how-to-use-hardware-security-keys-like-yubikey-for-2fa/5308/6 "2020-01-15T23:49:55Z")

</div>

The vast majority of email is clear text and is quite easy to intercept between in transit if any of the transiting email servers do not use encrypted links.

My current main bank is mobile app only so security is authentication is FaceID. My other bank uses an ID code and a grid of numbers that changes every time I visit the website for me to punch in my passcode. Not sure hire’s that works. No 2FA though.
