Duo - Configure Security Key (YubiKey, Feitian, etc.)

+

Configure a Security Key with Duo

It is recommended to register more than one device with your Duo account.  In addition to using recommended Mobile phone registration with Duo, consider enrolling a security key for additional layers of security and as a backup authentication method if your mobile device is lost or stolen.

Security keys are operating system agnostic.  They can be used on many operating systems including Windows, Mac OSX, Linux, and Unix.

See Add a Duo Device

What is a security key?

There are three common factors used for authentication:

  1. Something you know (e.g., a password).
  2. Something you have (e.g., a smart card or hardware token).
  3. Something you are (e.g., your fingerprint or other biometric marker).

Security keys are something you have.

Security keys are hardware based authentication tools that connect to devices such as desktops, laptops, tablets, or cell phones to verify a user's identity.  Security keys are an additional authentication factor, when combined with something you know or something you are, to ensure the right person is connected to the right device, service, or network.    

Security keys can connect to your devices via USB, Bluetooth, or USB-C ports. You can use a security key to protect access to the device itself or you can use a security key to log into accounts on a website or application.

The #1 security key enabling strong two-factor, multi-factor and passwordless authentication is YubiKey.

Why use a security key?

Ease of Use

Security keys are simple, compact, portable, frictionless authentication tools.  They are easy to transport in your backpack, wallet, or on your key ring.  They are plug-and-play for quick access, without having to remember a password.  With one touch, you can seamlessly move between systems, applications, or websites.

Phish Proof

Security keys must be registered with individual websites preventing access to fraudulent websites.  Since a security key must be physically present to grant access to resources, risk of data breach, misuse of One-Time-Passwords (OTPs) or tokens is mitigated.

One Key - Many Uses

Security keys can be used for Single Sign-On, Multi-Factor Authentication, and support FIDO authentication methods.

Enroll a Security Key with Duo

If you have a security key and would like to enroll the device with Duo, please follow instructions in these easy to follow guides:

Guide to Enroll Security Keys and Duo 

Guide to Enroll Security Keys and Duo Unix or Linux

 

 

 

Details

Article ID: 143296
Created
Fri 5/13/22 2:42 PM
Modified
Mon 6/20/22 9:30 AM