The difference is that Windows 10 treats the device and its TPM chip as a smart card, allowing you to sign in with a PIN or biometric authentication. If you use a PC running Windows 10, that might sound familiar, because it's essentially a variation on Windows Hello. (Yubico makes a full range of security keys in different form factors, including very small footprint Nano devices designed to be kept in a USB Type-C or Type-A slot full time.) A good third-party resource for authentication support is available at the the independent 2FA Directory. A full list of supported services is available on the Yubico website, where you can search and filter to find the ones that interest you. The Yubikey devices I tested support hundreds of services that use a handful of standards, including FIDO2 Web Authentication (WebAuthn).
To sign in, you have to supply your credentials and then insert the key and tap it in response to a prompt to submit your additional proof of identity. Hardware-based security, on the other hand, is much more difficult to successfully attack remotely. As the FBI warned just a few months ago, SIM-swapping and other attacks can make it possible to bypass 2FA protection. That's especially true for journalists, activists, and people who work for high-value targets like banks and defense contractors. Why pay for this sort of security when the software-based options are free? Primarily because hardware-based keys are significantly more secure than SMS- and software-based options. If you see inaccuracies in our content, please report the mistake via this form. If we have made an error or published misleading information, we will correct or clarify the article. Our editors thoroughly review and fact-check every article to ensure that our content meets the highest standards. Our goal is to deliver the most accurate information and the most knowledgeable advice possible in order to help you make smarter buying decisions on tech gear and a wide array of products and services. ZDNET's editorial team writes on behalf of you, our reader. Indeed, we follow strict guidelines that ensure our editorial content is never influenced by advertisers. Neither ZDNET nor the author are compensated for these independent reviews. This helps support our work, but does not affect what we cover or how, and it does not affect the price you pay. When you click through from our site to a retailer and buy a product or service, we may earn affiliate commissions. And we pore over customer reviews to find out what matters to real people who already own and use the products and services we’re assessing. We gather data from the best available sources, including vendor and retailer listings as well as other relevant and independent reviews sites. ZDNET's recommendations are based on many hours of testing, research, and comparison shopping.
0 kommentar(er)
